Measured event size · Proxy

Bluecoat log size: 300 bytes per event

The average Bluecoat event is 300 bytes, measured from samples of its logs. A proxy source typically produces 600 events per second per device, bursting to 3,000: one record per HTTP request, tracks user count. The rate is an informed estimate; the size is measured.

300 B
per event, measured
600
events per second, typical
15.6 GB
per device per day
5.7 TB
per device per year

What that comes to

One device, raw bytes, at the typical rate for a proxy source.

PeriodAt 600 events/sAt the 3,000 events/s burst
An hour648 MB3.2 GB
A day15.6 GB77.8 GB
90 days1.4 TB7 TB
A year5.7 TB28.4 TB

A day of Bluecoat logs from one device at the category's typical rate, 15.6 GB, is about the size of an 8B model’s weights.

Size your own

600
events per second
15.6 GB
per day
1.4 TB
at retention

Raw bytes, before compression, indexing overhead and replication.

Measure a sample of your own

The figure above is an average; yours will differ, and for Bluecoat what moves it most is this: one record per HTTP request, tracks user count. The profiler reads a sample from Bluecoat in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.

Other proxy sources

The proxy category: its typical rate and every source in it →

Logcaliper, free on iOS, has these sizes and rates built in and sizes a whole list of sources at retention: storage, cluster capacity, nodes.