https://community.splunk.com/t5/Installation/Does-anyone-have-a-good-rule-of-thumb-for-predicting-Active/m-p/454686#M5929 <P>hello there,</P> <P>yes it sounds fair.<BR /> also depends on how heavy your users / applications that are integrated / querying against it.<BR /> AD is a great and verbose data source, show us what use cases you came up with, and relay on experience here on answers.</P> <P>hope it helps</P> Tue, 24 Jul 2018 00:17:01 GMT adonio 2018-07-24T00:17:01Z https://community.splunk.com/t5/Installation/Does-anyone-have-a-good-rule-of-thumb-for-predicting-Active/m-p/454685#M5928 <P>Does anyone have a good rule of thumb for predicting Active Directory logs per day per controller?</P> <P>I'm looking for rough numbers in the most typical of typical environments and mostly interested in security logs.</P> <P>I know the answer is a massive "depends", but at the moment I'm looking at something along the lines of 1GB/day per 100 Users per AD Controller.</P> <P>Does this sound fair?</P> Mon, 15 Jun 2020 19:38:43 GMT https://community.splunk.com/t5/Installation/Does-anyone-have-a-good-rule-of-thumb-for-predicting-Active/m-p/454685#M5928 gonz0 2020-06-15T19:38:43Z https://community.splunk.com/t5/Installation/Does-anyone-have-a-good-rule-of-thumb-for-predicting-Active/m-p/454686#M5929 <P>hello there,</P> <P>yes it sounds fair.<BR /> also depends on how heavy your users / applications that are integrated / querying against it.<BR /> AD is a great and verbose data source, show us what use cases you came up with, and relay on experience here on answers.</P> <P>hope it helps</P> Tue, 24 Jul 2018 00:17:01 GMT https://community.splunk.com/t5/Installation/Does-anyone-have-a-good-rule-of-thumb-for-predicting-Active/m-p/454686#M5929 adonio 2018-07-24T00:17:01Z