Hello,
we would need some assistance with sizing a virtual syslog-store-box that should handle approximately 5000 clients, mostly divided in windows and linux server (only audit logs) Specifically, we require an SSB that can handle 4,000 events per second with a retention of 6 months. Do you have any documentation that can help us determine the hardware specifications needed to size our SSB? Currently, we have planned for two virtual SSBs with 8 CPUs, 32GB RAM and 8 TB of disk space. Do you have any suggestions or recommendations in this regard?
Thank You!
