Control of the main system database has now been incorporated into the central correlation engine.
Moving control of the central system database to the central correlation engine has increased overall performance of the system and also allows events to be correlated over a much wider timeframe.
Up until now the databases have been managed by a separate process running on the CCS, which meant that in larger deployments the system database would be a large, processor hungry system separate from the main correlation processing, reducing query efficiency and limiting the timeframe and usefulness of lookbacks
As a result of moving the central database control to the same process as the correlation engine the system has become faster to use, as less total processing is required by each piece of hardware. The net effect of this is that each correlation system is able to hold more data for longer, making the correlations more effective.
This update is CCS based, and will be pushed to all managed customers at the pre-agreed upgrade time. Self-monitored customers can update their own CCS using the software upgrade processes. If you have any further questions about this upgrade please contact us at firstname.lastname@example.org