It's tricky, because one 10 minute sliding window will destroy the server process when faced with any significant load. If we are to support this kind of analysis it will probably look completely different. Personally I would like to get rid of drools altogether in the future and replace it with something else, but that's just my personal opinion.
cheers, -k On Tuesday, December 9, 2014 2:56:32 PM UTC+1, Dmitri Stoljarov wrote: > > Hi, > > Any plans to have something similar in future releases of Graylog2? > > On Tuesday, December 9, 2014 2:33:12 PM UTC+2, Kay Röpke wrote: >> >> Hi! >> >> The embedded drools is not enabled to do streaming operations. >> Mostly because it uses really insane amounts of memory and probably will >> be out of memory soon. >> >> -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
