Hi Mikkel, On Mon, Apr 13, 2015 at 06:48:06AM +0000, Mikkel Leth Carlsen wrote: > And yes, the parser is extremely fast. My current setup is currently processing (and parsing) around 20k events per second on a 2 CPU VMWare instance without any signs of problems… How many rules do you have, if I may ask?