Interactive Tool

SIEM Sizing Calculator.

Add your log sources by category for an instant, indicative estimate of EPS, peak load, daily ingest and storage — then talk to our architects for a full assessment.

Pick the data sources in your environment, then enter device counts. Each source applies an industry-standard average EPS rate and a typical event size, so both your EPS and GB/day estimates adjust to the source types you select. Tune the modelling assumptions — or override EPS directly — if you have measured values.

Data sources tap to include / exclude

Modelling assumptions retention · event size · peak · compression

Retention period

Compliance profile

Avg event size bytes — blank = per source

Peak-to-avg factor

Stored ÷ raw ratio compression

Growth headroom %

Known EPS override events/sec — optional

Known daily volume override GB/day — optional, ignored if EPS override is set

Indicative sizing estimate

—

Sustained EPSevents/sec

—

Peak EPSevents/sec

—

Data Ingestper day, raw

—

Provisioned Storageover retention · compressed

—

Recommended deployment

Indicative estimates only. Your actual sizing depends on log-source verbosity, audit policy, parsing and retention. Our architects will validate against your real environment.

Get a detailed SIEM sizing assessment from our architects →

See your threat landscape in real time.

Request a live demonstration of our SOC capabilities.

Request a Demo →