[Bro-Dev] [JIRA] (BIT-1162) Sumstat measurements stop working on clusters with single slow nodes

Bernhard Amann (JIRA) jira at bro-tracker.atlassian.net
Fri Mar 28 13:13:39 PDT 2014

    [ https://bro-tracker.atlassian.net/browse/BIT-1162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15908#comment-15908 ] 

Bernhard Amann commented on BIT-1162:

It looks like BIT-1170 might completely (or at least nearly completely) solve this issue. However, we probably still should look for a way to make data aggregation quicker in this cases - it can take quite a while until all nodes have reported back...

> Sumstat measurements stop working on clusters with single slow nodes
> --------------------------------------------------------------------
>                 Key: BIT-1162
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1162
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: git/master
>            Reporter: Bernhard Amann
>             Fix For: 2.3
> If you use sumstats on a Bro cluster and have one (or more) overloaded nodes, sumstats is near unusable at the moment.
> Sumstats asks for all keys in order. The speed of getting them seems to depend on the speed in which the individual cluster worker nodes answer.
> If there is a very slow node in the network, for sumstats with a higher number of keys, processing will just stop after just a few keys. No warning message or similar is output.

This message was sent by Atlassian JIRA

More information about the bro-dev mailing list