How long would an RSA Security Analytics concentrator reindex take

Issue

When a concentrator is being re-indexed, it will become offline and will only be accessible once the re-index is over.

This can take anywhere from minutes to days, depending on the size of session database (DB) in the concentrator

Resolution

Index would reset at ~ 100,000 sessions/second on a normal concentrator, so the formula to obtain an estimated downtime is:

ETA of downtime in Hours =  (number of sessions in session DB/100,000)/3600

NOTE: The number of sessions in session DB can be obtained from:  Concentrator > Explore >  database > stats > session.total

Notes

Product Details

RSA Product Set: RSA Security Analytics
RSA Product/Service Type: Concentrator Appliance
RSA Version/Condition: 10.3.x and above

Approval Reviewer Queue

ASOC Approval Group