Symantec 10521146 - Network Security 7120 Administration Manual page 312

312 Advanced configuration
Configuring advanced parameters
Setting Event Message Hashes
Event Message Hashes balance the rate of incoming events and adjust the
analyzing logic by setting the number of hash buckets to keep.
The default value of 7 is set for optimum performance, and you do not need to
change it under most circumstances. However, if you expect a node to monitor
an excessively large volume and variety of different attacks, you might increase
the value to provide a larger number of message hashes.
To configure node parameters
1
Click Configuration > Node > Network Security Parameters.
2 In Select Node, choose the node from the pull-down list, and click OK.
3 In the left pane, click Event Message Hashes.
4 In the lower right pane, enter the value.
5 Click Apply.
6 In Apply Changes To, select the node or subset of nodes that you want to
apply the parameter to.
7 Click OK to save the changes to this sensor and close.
Caution: Take note of the following precautions:
Before making such changes, we recommend that you consult our
■
support team at
Make sure that the system has enough RAM to support this advanced
■
parameter.
Restart Symantec Network Security for changes to this parameter to
■
take effect.
Setting Event Destination Hashes
Event Destination Hashes balance the rate of incoming events and adjust the
analyzing logic by setting the number of destination buckets to keep.
The default value is set to 4 for optimum performance, and you do not need to
change it under most circumstances. However, if you expect a node to monitor
an excessively large number of ports, you might increase the value to provide a
larger number of destination hashes.
http://www.symantec.com/techsupp/enterprise