Does anyone have a good rule of thumb for predicting Active Directory logs per day per controller?

[gonz0]

Does anyone have a good rule of thumb for predicting Active Directory logs per day per controller?

I'm looking for rough numbers in the most typical of typical environments and mostly interested in security logs.

I know the answer is a massive "depends", but at the moment I'm looking at something along the lines of 1GB/day per 100 Users per AD Controller.

Does this sound fair?

[adonio]

hello there,

yes it sounds fair.
also depends on how heavy your users / applications that are integrated / querying against it.
AD is a great and verbose data source, show us what use cases you came up with, and relay on experience here on answers.

hope it helps