top of page

HP ArcSight ESM Performance Testing

  • Writer: Pavan Raja
    Pavan Raja
  • Apr 8, 2025
  • 3 min read

Summary:

PerfSight is a suite of tools aimed at automating the performance testing of HP ArcSight Enterprise Security Manager (ESM). It provides a platform for distributed system testing, including event stream generation, user interaction, and metrics collection. Key features include minimal setup, quick start, automatic deployment in virtual machines, and an exposed web service API for executing tests. The suite is designed to simplify the performance testing process, allowing testers to focus on testing without hassle. It comes as a self-contained zip file, can be started with a single script execution, and supports automated test scenarios through scripts or cron jobs. ESM (Enterprise Security Manager) is a system that manages event streams from various sources such as connectors, network devices, servers, etc., including components like Connectors, Console, Reports, Data store, Query Viewers, Network, Active Channels, and Logic. In performance testing of ESM, two main approaches are considered: 1) cloning a full ESM deployment for test infrastructure (Pros: realistic results; Cons: expensive and time-consuming), and 2) defining test boundaries using simulation with virtual components (Pros: minimal infrastructure and easy automation; Cons: assumptions about typical behavior may not hold). Overall, PerfSight simplifies the process of performance testing by offering a versatile platform that allows for automated testing scenarios across various ESM components. The text discusses a method for testing and simulating systems using virtual connectors, virtual users, and defining test scenarios in a controlled environment. It covers aspects such as throughput testing (for writes), query testing (reads), and 'real world' testing by combining read/write operations. The goal is to simulate user interactions with the system under different conditions and configurations to evaluate performance, scalability, and response times in a safe and repeatable manner before deployment.

Details:

PerfSight is a suite of tools designed to automate the performance testing of HP ArcSight Enterprise Security Manager (ESM). It aims to provide a platform for distributed system testing, including event stream generation, user interaction, and metrics collection. Key features include minimal setup, quick start, automatic deployment in virtual machines, and an exposed web service API for executing tests. The design goals of PerfSight are to simplify the performance testing process, allowing testers to focus on testing without hassle. The suite is packaged as a self-contained zip file, can be started with a single script execution, and supports automated test scenarios through scripts or cron jobs. ESM (Enterprise Security Manager) is a system that manages event streams from various sources such as connectors, network devices, servers, and more. It includes components like Connectors, Console, Reports, Data store, Query Viewers, Network, Active Channels, and Logic. In performance testing of ESM, two main approaches are considered: 1) cloning a full ESM deployment for test infrastructure (Pros: realistic results; Cons: expensive and time-consuming), and 2) defining test boundaries using simulation with virtual components (Pros: minimal infrastructure and easy automation; Cons: assumptions about typical behavior may not hold). Overall, PerfSight simplifies the process of performance testing by offering a versatile platform that allows for automated testing scenarios across various ESM components. This text discusses a method for testing and simulating systems using virtual connectors, virtual users, and defining test scenarios in a controlled environment. It covers various aspects such as throughput testing (for writes), query testing (reads), and 'real world' testing by combining read/write operations. The goal is to simulate user interactions with the system under different conditions and configurations to evaluate performance, scalability, and response times in a safe and repeatable manner before deployment.

Disclaimer:
The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.

Recent Posts

See All
Zeus Bot Use Case

Summary: "Zeus Bot Version 5.0" is a document detailing ArcSight's enhancements to its Zeus botnet detection capabilities within the...

 
 
 
Windows Unified Connector

Summary: The document "iServe_Demo_System_Usage_for_HP_ESP_Canada_Solution_Architects_v1.1" outlines specific deployment guidelines for...

 
 
 

Comments


@2021 Copyrights reserved.

bottom of page