Measured event size · Firewall

PaloAlto Networks OS log size: 348 bytes per event

The average PaloAlto Networks OS event is 348 bytes, measured from samples of its logs. A firewall source typically produces 600 events per second per device, bursting to 3,000: per appliance; TLS inspection multiplies it. The rate is an informed estimate; the size is measured.

What that comes to

One device, raw bytes, at the typical rate for a firewall source.

A day of PaloAlto Networks OS logs from one device at the category's typical rate, 18 GB, is about the size of an 8B model’s weights.

Size your own

Raw bytes, before compression, indexing overhead and replication.

Measure a sample of your own

The figure above is an average; yours will differ, and for PaloAlto Networks OS what moves it most is this: per appliance; TLS inspection multiplies it. The profiler reads a sample from PaloAlto Networks OS in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.

Other firewall sources

• Palo Alto Firewall734 B
• Forcepoint Firewall561 B
• Checkpoint FW200 B

The firewall category: its typical rate and every source in it →