CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ40

VerifiedFalcon Next-Gen SIEM Overview and Architecture

When determining the required sizing for log collector clients in a Next-Gen SIEM deployment, what should be considered first?

Explanation

Expected daily log volume from each data source establishes the ingestion workload that log collector clients must handle. It is the basis for determining the capacity required for collection, processing, and storage; network bandwidth and host resources are evaluated against that workload. Palo Alto Networks identifies log rate as the most accurate method for sizing log collection infrastructure.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!