Corelight vs. DX Spectrum

As I said before, not only for Spectrum, but for any monitoring tool, you need to know what is critical in your environment and think about how exactly you should monitor and treat it. If you have done that, everything will work just fine.

• Well Suited - Networking Monitoring
• Less Appropriate - When you need to customize some monitoring and to update the version

Incentivized

• Polling and traps can be configured to take heartbeats at specified intervals and notify on an event in real-time, respectively.
• Topology of devices gives a high-level overview of network architecture.
• Discovery of devices is simple and secure with the use of community strings.
• Details can be added per device or alarm type for actions to be taken to make troubleshooting easier.

Incentivized

• NOC
• Data Center/Telecom

Incentivized

Other tools I have used are more server/application-centric. CA Spectrum seems to work effectively and efficiently for network devices. Notification delays can be set to grant grace periods in case of network blips or false positives, which occur ALL the time. Other monitoring tools send event notifications immediately and would clear instantly, which while on-call can wake a technician for no reason.

Incentivized

• Proactive monitoring for networking
• To many times to plan an update

Incentivized