Measured event size · Application

Open SSH log size: 111 bytes per event

The average Open SSH event is 111 bytes, measured from samples of its logs. An application source typically produces 100 events per second per device, bursting to 1,000: web access logs high, service audit trails low. The rate is an informed estimate; the size is measured.

What that comes to

One device, raw bytes, at the typical rate for an application source.

A day of Open SSH logs from one device at the category's typical rate, 959 MB, is about the size of a CD-ROM.

Size your own

Raw bytes, before compression, indexing overhead and replication.

Measure a sample of your own

The figure above is an average; yours will differ, and for Open SSH what moves it most is this: web access logs high, service audit trails low. The profiler reads a sample from Open SSH in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.

Other application sources

• Apache Flink2,000 B
• Apache Kafka2,000 B
• Office 3651,958 B
• Google Audit400 B
• Apache HTTP Server300 B
• Twitter message140 B

The application category: its typical rate and every source in it →