How many sensors can be added to the local probe in cluster mode?

Hello Jonathan,

Thank you for your post.

We usually recommend to not have more the 3000 sensors on a probe. However this depends on the type of sensors you are using, for example if you mostly use Ping and SNMP Traffic sensors (low impact sensors) then you could go up to the mentioned 3000 sensors. If you plan on using high impact sensors (such as WMI sensors), then we recommend to have less then 200 of these sensors, and in the case of sensors that have a very high impact on performance (such as the Syslog Receiver sensor), we recommend to stay below 50.

Kind regards,
Sasa Ignjatovic, Tech Support Team

The Cluster Connectivity option of each probe was set to 'Remote probe sends data to all cluster nodes'.

If each probes are connected to all cluster nodes, is the probe performance reduced by half compared to sending only to the master ?

For example, is the recommended number of syslog sensors reduced from 50 to 25?

Hello Jonathan,

No, the number of available sensors is not cut in half (on Remote Probes), since the probe executes only one scan for each sensor, it sends only the same data to multiple cluster nodes.

The number of sensors is cut down only when the sensors are on the "Cluster Probe", since these sensors are being monitored by the Master nodes and the Failover node separately (each node performs his own scan), which effectively doubles the sensor scans.