search

PaloAltoNetworks / minemeld-core

Engine of MineMeld
Apache License 2.0
141 stars 95 forks source link

Support for external DB #374

Open MatteoManzoni opened 3 years ago

MatteoManzoni commented 3 years ago

Is your feature request related to a problem?

Sort of, we are trying to integrate minemeld to our custom made SIEM... We run scheduled queries that retrive a feed with 500k IPs, it takes about 4minutes to download. 4 minutes is a lot if scaled up. The query runs every hour on every client SIEM instance (15 now)

We use kubernetes to deploy minemeld container. This istance is shared between every SIEM instance.

Describe the solution you'd like

We'd like to be able to use an external mariadb database to store minemeld container data to have HA and LoadBalancing of istances.

We cannot find any references of this deployment strategy in the wiki or existing issues.

Describe alternatives you've considered

Using other type of persisting storage doesn't resolve the problem, we've tried NFS, Longhorn, iSCSI, local SSD

cdsouza-cta commented 3 years ago

have the same issue. would be great if externalDB is supported.