My Fortigate device sends syslogs to my Splunk server and approximately 40G per day, in your view, is it reasonable?
I need to keep my data on splunk for 90 days but I do not have enough storage!!!
40 gigs a day off a single appliance can be high, normal, or very (very) low
That you don't have enough storage indicates your environment likely wasn't architected properly
Proper sizing and implementation is done by Splunk PS and/or PS partners - or you may even be able to get what you need via your Sales rep or SE
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.