Measured event size · Servers

VMware ESX log size: 80 bytes per event

The average VMware ESX event is 80 bytes, measured from samples of its logs. A server source typically produces 30 events per second per device, bursting to 250: generic appliance OS, no process auditing. The rate is an informed estimate; the size is measured.

80 B
per event, measured
30
events per second, typical
207 MB
per device per day
75.7 GB
per device per year

What that comes to

One device, raw bytes, at the typical rate for a server source.

PeriodAt 30 events/sAt the 250 events/s burst
An hour8.6 MB72 MB
A day207 MB1.7 GB
90 days18.7 GB156 GB
A year75.7 GB631 GB

A day of VMware ESX logs from one device at the category's typical rate, 207 MB, is about 3 times an hour of Spotify.

Size your own

30
events per second
207 MB
per day
18.7 GB
at retention

Raw bytes, before compression, indexing overhead and replication.

Measure a sample of your own

The figure above is an average; yours will differ, and for VMware ESX what moves it most is this: generic appliance OS, no process auditing. The profiler reads a sample from VMware ESX in your browser, line by line, one event per line, and reports the bytes per line to set against it. Nothing is uploaded.

Other server sources

The server category: its typical rate and every source in it →

Logcaliper, free on iOS, has these sizes and rates built in and sizes a whole list of sources at retention: storage, cluster capacity, nodes.