Syslog - Volume of logs

[Boundless]

Hi, 

I am trying to estimate the volume of logs that an MX produces on a monthly basis.

I couldn't find a calculator for that.

Any idea?

Thanks

Best,

Ed

[BrandonS]

It seems like that would be impossible to estimate since each system can be so different, no? Which types of logs specifically? Maybe you can sample a system for a day or a week to get a baseline?

[Boundless]

You are right Brandon. Except I need to submit a pricing for an org I dont' have access to. That's why I was trying to get a rough estimate of the volume it would represent.

[DarrenOC]

Hi @Boundless , there is nothing documented for this.  As @BrandonS states, you’ll need to baseline this on your own network.

[cmr · Accepted solution]

@Boundless it really does depend on how much traffic is going through it and what features you have enabled.

For our MXs running the enterprise license they are generating between 200 and 7000 events per minute with the main datacenter concentrator being the 7000 and a lightly populated office being 200 epm.  A reasonably busy normal venue generates about 2000 epm.