SIEM Sizing Calculator
Size your SIEM deployment: calculate EPS capacity, storage, infrastructure nodes, and license costs by pricing model (Splunk, QRadar, Sentinel).
Inputs
Results
Total EPS
500
Annual license ($)
$47,073
Daily ingestion (GB)26.2
Indexed storage (TB)3.45
Server nodes3
CPU cores28
RAM (GB)112
Monthly total ($)$5,491
Cost per EPS ($/yr)$131.79
How to Use This Calculator
- Enter log sources and average EPS per source.
- Set online retention (days) and select pricing model (EPS-based, storage-based, or hybrid).
- Review total EPS, daily ingestion (GB), total storage (TB), and total nodes.
- Add 30-50% headroom for event spikes during incidents or initial onboarding of new log sources.
- Compare EPS-based to storage-based pricing -- high-volume/low-value sources favor storage pricing.
Ad Placeholder
Ad Placeholder