Concrete differences between Evaluation and Standalone

[jnikodemus]

The documentation just says that Evaluation is ideal for classroom or small lab environments and "...Standalone is more ready for production usage.". Are there any special, noticeable differences?

[manuelplascencia]

I noticed on the SO youtube channel from 2020 conference video it goes into that check it. https://youtu.be/SAubxi13K-Q Thank you, Manuel Plascencia Director of Technology & Information Services Whittier City School District (562)789-3261 ***@***.*** Follow us @WhittierCitySD on FB, and @WhittierCity on Twitter #WCSDTeamKids San Gabriel Valley Tech Exchange - (Subscribe) CETPA Region Secretary

…

On Jun 12, 2021, at 5:10 AM, JNikodemus ***@***.***> wrote:  The documentation just says that Evaluation is ideal for classroom or small lab environments and "...Standalone is more ready for production usage.". Are there any special, noticeable differences? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

[manuelplascencia]

While I was looking up Syslog info, I also found some addition info in here, that might be useful to you.

https://docs.securityonion.net/en/2.3/ingest.html?highlight=syslog

[jnikodemus]

Thanks for your answers, that helps me a lot!

[dougburks]

The Architecture section of the documentation has more information and includes diagrams for both Evaluation and Standalone:
https://docs.securityonion.net/en/2.3/architecture.html