audit binsize

[unixfreak]

Hi, does anyone have any idea how much spacer you'd need for an audit config like 'default = general,files,objects'? Also, how quickly would a 10k bin file fill up under "normal" use?

Thanks

 

[unixfreak]

Sorry, forgot to say we're supposed to keep this for a year

 

[khalidaaa]

Logically, it depends on what things you are auditing and how often you expect the action audited to occur!

Quick solution, start your audit on a normal day and note down the growth!

Regards,
Khalid

 

[unixfreak]

The growth is unbelievably random... Can add 100MB on hour and then nothing for a day

 

[khalidaaa]

Then go for the maximum increase in your monitoring period!

Or what you can do is to add an arbitrary big space and then shrink it after monitoring the utilization!

 

[unixfreak]

I'm not adding 1TB to /, no way. And the storage teams tape library is maxed out as well. The storage requirements for auditing seem a bit extreme to me...