Manager Scalability and Performance

The Manager is designed to scale from small deployments (1–25 Sensors) to large enterprise deployments (100–200 Sensors).

• Event Ingestion: All Sensors log to local Unix socket → Sensor adapter → message queue.
• Streaming Analytics: Analytics engine consumes message queue and performs real-time behavioral analysis.
• Storage Layer: Hot data in full text indexed storage(recent events, fast search); warm/cold data in columnar database storage(long-term retention, cost-optimized analytics).
• Manager Sizing:

• Horizontal scaling via additional Manager nodes.