Measured event size · Linux/Unix host

Infoblox log size: 200 bytes per event

The average Infoblox event is 200 bytes, measured from samples of its logs. A Linux or Unix host source typically produces 30 events per second per device, bursting to 300: auditd rules decide this. The rate is an informed estimate; the size is measured.

200 B
per event, measured
30
events per second, typical
518 MB
per device per day
189 GB
per device per year

What that comes to

One device, raw bytes, at the typical rate for a Linux or Unix host source.

PeriodAt 30 events/sAt the 300 events/s burst
An hour21.6 MB216 MB
A day518 MB5.2 GB
90 days46.7 GB467 GB
A year189 GB1.9 TB

A day of Infoblox logs from one device at the category's typical rate, 518 MB, is about 7 times an hour of Spotify.

Size your own

30
events per second
518 MB
per day
46.7 GB
at retention

Raw bytes, before compression, indexing overhead and replication.

Measure a sample of your own

The figure above is an average; yours will differ, and for Infoblox what moves it most is this: auditd rules decide this. The profiler reads a sample from Infoblox in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.

Other Linux or Unix host sources

The Linux or Unix host category: its typical rate and every source in it →

Logcaliper, free on iOS, has these sizes and rates built in and sizes a whole list of sources at retention: storage, cluster capacity, nodes.