I have LEM and need to meet the following requirements
6 month retention for log files
My current system just monitoring 34 servers and 8 firewalls has already chewed up this much space.
Disk Usage:
TriGeo: 19% (510M/2.9G)
OS: 41% (1.1G/2.9G)
Logs/Data: 40% (86G/230G)
Temp: 1% (53M/5.8G)
Database Queue(s): 4.0K (No alerts queued, 13820 alerts waiting in memory)
Rules Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)
Console Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)
EPIC Rules Queue: 2.1M (0 alerts queued, 0 alerts waiting in memory)
Logs: 62G
How can I make sure that we retain 6 months worth of logs?
How do I figure out how much a day of space is being used?
We are planning on adding 74 more servers to this as well.
Any heil would be appreaciated.