You can deploy multiple Correlation Engines, each on its own server, without the need to replicate configurations or add databases. For environments with large numbers of Correlation rules or extremely high event rates, it can be advantageous to install more than one Correlation engine and redeploy some rules to the new Correlation engine. Multiple Correlation engines provide the ability to scale as the Sentinel system incorporates additional data sources or as event rates increase. For information on installing additional Correlation Engines, see Section 11.6, Installing Additional Collector Managers and Correlation Engines.
NOTE:You cannot install more than one Correlation Engine on a single system. You can install additional Correlation Engines on remote systems, and then connect them to the Sentinel server.