In log management systems, each hardware source is used for separate tasks. So it's definable which service or event uses more system resources according to the intensity of the hardware or the job that is wanted to be done.
Likewise, when we see the other side of it, we'll need to specify the system requirements correctly to increase the efficiency of the services and the events.
1- CPU: It affects the speed of the logs writing process to the disk directly. The more CPU you assign, the sooner it will process and parse the logs and then write them to disk.
2- RAM: It's directly related to the visual usage of the system. The usage of dashboard and the system visuals affects the usage of RAM. Alert-correlation and reporting & offline reporting processes are also directly related to RAM usage too.
3- DISK: Disk space is directly related to keep the logs as well as the I/O performance. I/O values of the disks affects the read and write speed of the data. we highly recommend you to choice disks that have high I/O performance.
|Recommended Minimum Requirement|
|Logsign Focus for SMB||Logsign Focus||Logsign Forest|
|4 Core||8-12 Core||Ask for support|
|16 GB||32-128 GB||Ask for support|
|500 GB||2-4 TB||Ask for support|