Real-Time network traffic flows are collected down to the minute. The historical collection of real-time information is set by default to 3 months or as long as disk space availability can retain whichever comes first.
Long-term trending aggregates network traffic flows down to the hour and retains only the information required to qualify the ownership of the flow and the well-known services. Its built for speed of analysis enabling high speed access to trending and billing information. Trending is OFF by default and can be enabled in Configuration > Administrator>Site Configuration
Real-Time data updates every minute at the end of the minute whilst Long-Term data by default aggregates based on collection rules and updates every hour at the end of the hour depending on hardware and flow load.
Our data collection methodology also pre-normalizes transactional data enabling very fast analysis of logical areas and networks.
CySight outperforms and scales beyond any other collection mechanism available and has very high fault tolerance (which translates to low maintenance for our customers).