Right now we are running SQL 2008 on a MS 2008 r2 platform.
We do log all messages to SQL for the ability to search them.
We have ordered another KIWI license so we can do some load sharing.
I have arranged the rules so the heavy hitters are at the top of the list and every rule does have a 'stop' line at the end. I am using the KIWI log to external db actions. However I am strongly considering doing some parsing of the syslog msg strings relating to the DHCP servers. The users that search those tables are suffering through very long query times due so substring searches against million of row.
We are getting a SQL Enterprise version and I am hoping to leverage a table partitioning scheme to facilitate management of the SQL tables.
I am not a real SQL Dba but have learned a fair amount over that last couple of years.
Thanks for the input.
BobL.
Clik here to view.
