Measured event size · Application
Apache HTTP Server log size: 300 bytes per event
The average Apache HTTP Server event is 300 bytes, measured from samples of its logs. An application source typically produces 100 events per second per device, bursting to 1,000: web access logs high, service audit trails low. The rate is an informed estimate; the size is measured.
What that comes to
One device, raw bytes, at the typical rate for an application source.
| Period | At 100 events/s | At the 1,000 events/s burst |
|---|---|---|
| An hour | 108 MB | 1.1 GB |
| A day | 2.6 GB | 25.9 GB |
| 90 days | 233 GB | 2.3 TB |
| A year | 946 GB | 9.5 TB |
A day of Apache HTTP Server logs from one device at the category's typical rate, 2.6 GB, is about the size of an hour of Netflix in HD.
Size your own
Raw bytes, before compression, indexing overhead and replication.
Measure a sample of your own
The figure above is an average; yours will differ, and for Apache HTTP Server what moves it most is this: web access logs high, service audit trails low. The profiler reads a sample from Apache HTTP Server in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.
Other application sources
- Apache Flink2,000 B
- Apache Kafka2,000 B
- Office 3651,958 B
- Google Audit400 B
- Twitter message140 B
- Open SSH111 B
The application category: its typical rate and every source in it →
Logcaliper, free on iOS, has these sizes and rates built in and sizes a whole list of sources at retention: storage, cluster capacity, nodes.