Measured event size · Application

Office 365 log size: 1,958 bytes per event

The average Office 365 event is 1,958 bytes, measured from samples of its logs. An application source typically produces 100 events per second per device, bursting to 1,000: web access logs high, service audit trails low. The rate is an informed estimate; the size is measured.

1,958 B
per event, measured
100
events per second, typical
16.9 GB
per device per day
6.2 TB
per device per year

What that comes to

One device, raw bytes, at the typical rate for an application source.

PeriodAt 100 events/sAt the 1,000 events/s burst
An hour705 MB7 GB
A day16.9 GB169 GB
90 days1.5 TB15.2 TB
A year6.2 TB61.7 TB

A day of Office 365 logs from one device at the category's typical rate, 16.9 GB, is about the size of an 8B model’s weights.

Size your own

100
events per second
16.9 GB
per day
1.5 TB
at retention

Raw bytes, before compression, indexing overhead and replication.

Measure a sample of your own

The figure above is an average; yours will differ, and for Office 365 what moves it most is this: web access logs high, service audit trails low. The profiler reads a sample from Office 365 in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.

Other application sources

The application category: its typical rate and every source in it →

Logcaliper, free on iOS, has these sizes and rates built in and sizes a whole list of sources at retention: storage, cluster capacity, nodes.