How much log storage per server, roughly?

asked by shadepl 18 days ago

trying to budget without filling in a vendor calculator that asks me for EPS as if i would know that

2 answers

▲

vivida (David) 17 points 18 days ago

Very rough, per day, before compression:

Quiet Linux box, syslog only: 5 to 50 MB
Linux web server with access logs: 200 MB to several GB, entirely traffic driven
Windows member server: 50 to 200 MB
Domain controller with auditing on: 1 to 10 GB, worse if somebody enabled everything
Firewall with session logging: 1 to 20 GB, and this is the one that surprises people

The DC and the firewall are what blow budgets, and both are mostly one or two event types repeating.

▲

mbxsec 5 points 17 days ago

Can confirm on the firewall. Ours was more than everything else combined until we stopped storing session closes.

Guidelines Newest Search Back to Trunc