I am looking for a sizing calculator for dumping O365 audit logs into Splunk Siem. Such as average log size per email to calculate data storage based on volume of mail, processing requirements for queries etc.
