Zenarmor - SQLite vs Mongo when using community repo - old Elastic?

[paul_a2]

Hi,

I actually have 2 questions.

1. I have a "regular" home network with home devices and an iot-vlan with few more - in total maybe 50 devices. Any reason why the SQLite db would not be sufficient and I should go for Mongo or Elastic? There is not much info about SQLite just the press release saying it is good for 100 devices. Maybe the correct wording for question is: for a home network is there any reason to use anything except SQLite if you have decently powerful opnsense box?

2. I tried Sensei like year ago, but uninstalled it at that time. Decided to try it again, and I have added community repo (mimugmail) for adguard  and unifi some time ago. At install Zenarmor detects community repo, and suggests SQlite or "remote elastic". I logged on to opnsense and found Elasticsearch installed. Afaik I know neither Adguard or Unifi does use elastic, could it be that it is left from old installation? Unifi uses Mongo though.

[sy]

Hi Paul,

1- SQLite is added for low-profile hardware machines and keeping data for short period (advised is 2 days). If you would like to keep data for more than 2 days and see reports without any performance issues, you need to prefer Elasticsearch.

2- It could be left from an old installation. The "mimugmail" repo includes Elasticsearch and we noticed that the users who install Elasticsearch via the "mimugmail" repo and Zenarmor installations have problems with elasticsearch.

[paul_a2]

Hi,

Thank you for answer. Need to consider then if I want to keep data for longer time and perhaps fix elastic.

[mimugmail]

Sorry for the trouble guys 

[cookiemonster]

Sorry to use this thread but I think it appropriate.
Similar to the OP I have just come back to install it again, after a hardware upgrade. I have the mimugmail repo added for Adguard and other bits but none to my knowledge install elasticsearch.
I have an elasticsearch process running, but my choice of db at install-time for Zenarmor was sqlite, small II (up to 50 devices).

Code: [Select]

$ sudo pkg info elasticsearch5
elasticsearch5-5.6.16_8
Name           : elasticsearch5
Version        : 5.6.16_8
Installed on   : Sun Nov 27 22:05:34 2022 GMT
Origin         : textproc/elasticsearch5
Architecture   : FreeBSD:13:*
Prefix         : /usr/local
Categories     : devel java textproc
Licenses       : APACHE20
Maintainer     : elastic@FreeBSD.org
WWW            : https://www.elastic.co/
Comment        : Full-text search engine for Java
Options        :
DOCS           : off
Annotations    :
cpe            : cpe:2.3:a:elasticsearch:elasticsearch:5.6.16:::::freebsd13:x64:8
repo_type      : binary
repository     : SunnyValley
Flat size      : 72.9MiB
Description    :
Elasticsearch aims to be a Distributed, RESTful, Search Engine built on top of
Apache Lucene.

WWW: https://www.elastic.co/
@sy do I need it the package installed and process running if I'm using sqlite? Or safe to remove?