Number of Alerts | Keep Backend | Keep Database | Redis | Elasticsearch |
---|---|---|---|---|
< 10,000 | 1 vCPUs, 2GB RAM | 2 vCPUs, 8GB RAM | Not required | Not required |
10,000 - 100,000 | 4 vCPUs, 8GB RAM | 8 vCPUs, 32GB RAM, optimized indexing | Not required | Not required |
100,000 - 500,000 | 8 vCPUs, 16GB RAM | 8 vCPUs, 32GB RAM, advanced indexing | 4 vCPUs, 8GB RAM | 8 vCPUs, 32GB RAM, 2-3 nodes |
> 500,000 | 8 vCPUs, 16GB RAM | 8 vCPUs, 32GB RAM, advanced indexing, sharding | 4 vCPUs, 8GB RAM | 8 vCPUs, 32GB RAM, 2-3 nodes |
Operation Type | Load | Specification | Execution Time |
---|---|---|---|
Digest Alert | 100 alerts per minute | 4 vCPUs, 8GB RAM | ~0.5 seconds |
Digest Alert | 500 alerts per minute | 8 vCPUs, 16GB RAM | ~1 second |
Digest Alert | 1,000 alerts per minute | 16 vCPUs, 32GB RAM | ~1.5 seconds |
Run Workflow | 10 workflows per minute | 4 vCPUs, 8GB RAM | ~1 second |
Run Workflow | 50 workflows per minute | 8 vCPUs, 16GB RAM | ~2 seconds |
Run Workflow | 100 workflows per minute | 16 vCPUs, 32GB RAM | ~3 seconds |
Ingest via Queue | 100 alerts per minute | 4 vCPUs, 8GB RAM, Redis | ~0.3 seconds |
Ingest via Queue | 500 alerts per minute | 8 vCPUs, 16GB RAM, Redis | ~0.8 seconds |
Ingest via Queue | 1,000 alerts per minute | 16 vCPUs, 32GB RAM, Redis | ~1.2 seconds |