Log Capacity

[JasonKorf]

Does anyone know how many events the event log is capable of handling per day? I have a potential customer that generates ~1.5 million per day and this is a concern.

[PhilipDAth]

Remember that Meraki does not generate events for flows allowed or denied - for the event log.  So this many events probably wont appear in the event log.

The flow data is aggregated to provide nice anayltics in the interface, but these don't appear in the event log.

You can implement a seperate syslog server if needed to record all the flows.

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Over...

[jdsilva]

If your client is generating that many log messages per day I would assume they have a dedicated logging server set up to handle that? If so then you can also point the Meraki devices to log via Syslog to that same server. If that server is handling that load today then it should be able to handle that load tomorrow. 

[Nick]

This is a definite case where a log server will be beneficial