I am having consistent problems with slow nDepth searches that often timeout on one of my LEM appliances. I have called SW Support and thus far they haven't been able to find anything wrong with my system. The system handles about 7 million events per day which I have been told isn't a lot in comparison with what it's designed for. My search is looking for any successful logins for a group of IP addresses (known bad IP addresses). If I try to search for anything more than a day it fails which is a problem as I often need to search over a week or several weeks which doesn't seem like an unreasonable use case.
I am curious if anybody else has experienced this type of problem and if so what, if anything, was done to resolve it.
Thanks in advance for any feedback!