Answer
GFI EventsManager is designed to use the resources available, in order to gain as much speed as possible.When scanning remote machines, GFI EventsManager tries to retrieve as many events as possible in the least amount of time. Should the need arise, GFI EventsManager may also try to retrieve events from multiple machines at the same time.
If a lot of data needs to be collected from the remote machines, GFI EventsManager will consume a high amount of bandwidth for a long period of time. This will highly depend on the throughput of the network.
More Information:
The following are the steps taken when GFI EventsManager scans a remote machine:
- GFI EventsManager will retrieve all the events to the local computer (where GFI EventsManager is installed)
- GFI EventsManager filters the events using the Event processing rules configured within the GFI EventsManager console
- Events that must be archived are sent to the database (only up to EventsManager 2011)
Note: Bandwidth usage for the GFI EventsManager machine may be greater than bandwidth usage for the Microsoft SQL server. This is because not all collected events will necessarily need to be archived.
Additional Notes:
- The average size of an event is 1 kilobyte
- Articles which discuss resources required by GFI EventsManager: