How big will eXpert-BSM processes grow?
When eXpert-BSM is running in real-time mode, there are these basic active processes: Run_eXpert_BSM start script, idle after initialization, size < 1.5MB ebsmprobe audit record probe, size < 2MB throttle audit record buffer handler, size depends on system load but should not exceed approx. 16MB, usually much smaller (1.5MB) ebsmgen audit record formatter, size < 3.5MB eXpert-BSM main analysis and reporting engine, size < 3.5MB In addition, if you chose to start the GUI, there is also: jre Java runtime environment, size < 15MB.
