[Bro-Dev] #634: CouchDB writer

Martin Holste mcholste at gmail.com
Mon Oct 3 11:57:13 PDT 2011


CouchDB will be far too slow for any large-scale setup.  Inserts at
higher than 1k/sec will start to back up.  Even MongoDB, which is
much, much faster than Couch, can only handle 2-3k/sec sustained.  You
may want to include a warning in your documentation to only send
notice or a few other types of logs into CouchDB or risk loss.

On Mon, Oct 3, 2011 at 10:39 AM, Bro Tracker <bro at tracker.bro-ids.org> wrote:
> #634: CouchDB writer
> -------------------------+-----------------------------
>  Reporter:  jeff.baumes  |       Type:  Feature Request
>   Status:  new          |   Priority:  Normal
> Milestone:               |  Component:  Bro
>  Version:               |   Keywords:
> -------------------------+-----------------------------
>  Attached is a git patch for logging information to CouchDB. It has a new
>  dependence on libcurl which it searches for with a find_package CMake
>  command, and JsonCpp (MIT license), whose code is included directly in the
>  source tree.
>
> --
> Ticket URL: <http://tracker.bro-ids.org/bro/ticket/634>
> Bro Tracker <http://tracker.bro-ids.org/bro>
> Bro Issue Tracker
>
> _______________________________________________
> bro-dev mailing list
> bro-dev at bro-ids.org
> http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
>



More information about the bro-dev mailing list