Measured event size · Servers

Cisco ISE log size: 970 bytes per event

The average Cisco ISE event is 970 bytes, measured from samples of its logs. A server source typically produces 30 events per second per device, bursting to 250: generic appliance OS, no process auditing. The rate is an informed estimate; the size is measured.

What that comes to

One device, raw bytes, at the typical rate for a server source.

A day of Cisco ISE logs from one device at the category's typical rate, 2.5 GB, is about 4 times a CD-ROM.

Size your own

Raw bytes, before compression, indexing overhead and replication.

Measure a sample of your own

The figure above is an average; yours will differ, and for Cisco ISE what moves it most is this: generic appliance OS, no process auditing. The profiler reads a sample from Cisco ISE in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.

Other server sources

• VMware ESX80 B

The server category: its typical rate and every source in it →