I am trying to introduce PacketBeat to the enterprise system for the security enhancement purpose. I have several questions. Could you please answer the following questions?
What is the maximum bps(supported bps) which does not lose any packets? I know it depends on hardware specification, but if you have any reference data, please let me know.
PacketBeat stores captured data into Elasticsearch. In this case, how much data does PacketBeat store into Elasticsearch per transaction? If you have any reference data, please let me know.
Is it possible for PacketBeat to build redundancy structure to implement high availability system which might have load balancing mechanism or cluster structure?
If you answer yes in question no.3, if one physical machine with PacketBeat has broken, is it possible to continue the process(packet capturing process and storing data process into Elasticsearch) with other machines?
When PacketBeat introduced machine has broken and fixed it, is it possible to continue the process(packet capturing process and storing data process into Elasticsearch) using the fixed machine without any problems?