IBM Security QRadar

Does anyone know if Qradar can provide visibility on how much syslog is consumed per on a log collector.

We are looking for analytics to help with the specification of a networking monitoring tool and want to how what size in GB of syslog does our Qradar gets per day.

You can have a look at the directories of your event collector, which has one directory per day and below that one directory per hour to store the payloads

# Statistik for a certain day

du -s -h /store/ariel/events/payloads/2022/11/21/

# Statistik for the indiviual hours of that day

du -s -h /store/ariel/events/payloads/2022/11/21/*

Regards

Thomas

Does anyone know if Qradar can provide visibility on how much syslog is consumed per on a log collector.

We are looking for analytics to help with the specification of a networking monitoring tool and want to how what size in GB of syslog does our Qradar gets per day.