I don't believe there is any relation between hard disk space and available cpu for graylog.
To understand what your requirement are for hardware we need to answer two questions: 1. How many messages per second do you want to process. Depending on the message size and complexity of steam and extractor rules, a few cpus (e.g. 4) can process a thousand or so messages a second. This does vary on CPU type sure but I'm basing this off of a virtual machine on a shared host. 2. How long do we want to reattain processed messages. This also somewhat depends on your message per second count. I don't think 20gb is much space considering how cheap storage is. I recommend a few hundred GB if you can spare it. I find it helpful to be able to search back easily through historical logs. Hope that helps! If you have any specific questions I'll be happy to try and answer them. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/92542704-eaf1-4888-adfa-39e7de7f915f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
