免费 · 网络与 IT 基础设施
日志与 SIEM 存储计算器.
根据日志源估算每秒事件数、每日日志量以及 SIEM 的热存储和归档存储容量。
CALCULATED IN YOUR BROWSER · NOTHING IS UPLOADED
Primary plus replicas in a cluster.
Total storage7.29 TB1,140 EPS average
- Average events per second
- 1,140
- Peak events per second
- 3,420 Licences and ingestion are often sized on peak EPS
- Raw data per day
- 71.54 GB
- Hot storage
- 4.29 TB
- Archive storage
- 3 TB
- Events per year
- 35,951,040,000
Volume by source
| Source | Events/s | GB per day |
|---|---|---|
| Windows servers | 100 | 12.96 |
| Linux servers | 60 | 2.07 |
| Firewalls | 600 | 25.92 |
| Workstations | 200 | 20.74 |
| Network devices | 30 | 0.78 |
| Web proxy | 150 | 9.07 |
- Event rates and sizes vary greatly with audit policy and verbosity; measure a week of real data before buying licences or disks.
- Compliance rules (PCI DSS, ISO 27001, local laws) set minimum retention periods.
使用方法: 日志与 SIEM 存储计算器
输入数据或选择文件，调整设置并生成结果。复制或下载之前，请检查结果。
限制与支持格式
输入内容在您的设备上处理。
英语技术说明
Example rates only; measure your own sources. Licence models (EPS, GB/day, per asset) differ between products. Everything is calculated in your browser; nothing is sent or probed on the network.
Daily volume = Σ count × EPS × event size × 86,400. Hot storage = daily volume × hot days × storage ratio × copies; archive = daily volume × remaining days ÷ compression.
Servers, firewalls, workstations and a proxy at 1,140 events per second produce about 72 GB a day and need about 7.3 TB for one year with 30 days hot.