Sort of, we are trying to integrate minemeld to our custom made SIEM... We run scheduled queries that retrive a feed with 500k IPs, it takes about 4minutes to download.
4 minutes is a lot if scaled up. The query runs every hour on every client SIEM instance (15 now)
We use kubernetes to deploy minemeld container. This istance is shared between every SIEM instance.
Describe the solution you'd like
We'd like to be able to use an external mariadb database to store minemeld container data to have HA and LoadBalancing of istances.
We cannot find any references of this deployment strategy in the wiki or existing issues.
Describe alternatives you've considered
Using other type of persisting storage doesn't resolve the problem, we've tried NFS, Longhorn, iSCSI, local SSD
Is your feature request related to a problem?
Sort of, we are trying to integrate minemeld to our custom made SIEM... We run scheduled queries that retrive a feed with 500k IPs, it takes about 4minutes to download. 4 minutes is a lot if scaled up. The query runs every hour on every client SIEM instance (15 now)
We use kubernetes to deploy minemeld container. This istance is shared between every SIEM instance.
Describe the solution you'd like
We'd like to be able to use an external mariadb database to store minemeld container data to have HA and LoadBalancing of istances.
We cannot find any references of this deployment strategy in the wiki or existing issues.
Describe alternatives you've considered
Using other type of persisting storage doesn't resolve the problem, we've tried NFS, Longhorn, iSCSI, local SSD