what database is used in stealthwatch?

[ehsan.emad]

what type of database is used in stealthwatch?

can we have explain about how stealthwatch can learn or analyze?  I mean the way of learning

[brford]

Sure Ehsan,

Stealthwatch actually uses several different databases tools but the one you are probably most interested in is our analytics database: which uses HP Vertica.

Put very simply; Stealthwatch uses unsupervised machine learning to creates models of what is 'normal' for the network.  When a host deviates from 'normal' it accumulates points; based in part on the amount of deviation.  Points can also be assigned based on defined negative or bad activities.  When a hosts point score reaches a certain point an alarm is raised.

I hope this helps.

Brian