Typical event rate · category
Network switch log rate: 3 events/s per device
A network switch source typically produces 3 events per second per device, bursting to 50: link state and 802.1X only. The rate is an informed estimate, a starting point for a sizing, not a measurement.
Measured sources in this category
None yet: no network switch has a measured event size in the catalogue, so the calculator below starts from a placeholder of 500 bytes. Put in your own.
Size a fleet
Raw bytes, before compression, indexing overhead and replication.
Measure a sample of your own
There is no measured size for network switch logs yet. The profiler reads a sample from network switch logs in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.
Logcaliper, free on iOS, has these sizes and rates built in and sizes a whole list of sources at retention: storage, cluster capacity, nodes.