VMware Cloud Community
chrischrischris
Enthusiast
Enthusiast

Log Inight, how to determine how much data is going in on a daily basis so I can estimate how much data we will forward to our security group

Hi all,

Our security folks have ordered my department to forward all the data coming into our Log Insight to their Splunk.

My manager asked me to determine how much data this would be per day, so security can purchase enough Splunk licenses.

How can I figure this out?

Thanks!

-Chris

Labels (1)
Reply
0 Kudos
1 Reply
daphnissov
Immortal
Immortal

I'm really not sure there is one other than when you reach the end of your allocated drives and vRLI sends out the email stating the daily ingestion rate. Maybe there's an internal command which can be run or some other measurement under-the-covers.

Reply
0 Kudos