Storage & Indexing
The Storage Layer is responsible for persistent storing of system data. It is based on the PostgreSQL server for operational data and the Chronicle SOAR logging system for logging data. The PostgreSQL server holds metadata, operational and management data as follows:
- System settings
- Users details
- Environments details (multi-tenancy)
- Integrations details
- Orchestrations definitions
- Cases details
- Enrichment data
- Reports metadata
- Jobs metadata
- Dashboards metadata
The logging system will allow you to troubleshoot ingestion errors, data processing and playbook failures, remote agents and other system capabilities.
The storage layer can be scaled up by adding additional resources.