We have RSA Security Analytics and we're trying to figure out the total size of logs collected by the Log Collector over the course of a day. For example: 3000 GB/day
Run a query with this:
Summarize = Session Size
Select = did
Alias = Log Decoder
Where = the Log Decoder name(s), you have none, leave blank
Then = If you want to break it down by type.
The output will the total capture with the time frame you select in your report.
you can find it in the "Licensing" tab (Administration -> System -> Licensing)
It depends on which Licensing you have, you will find the total size in the Metered or Service-Based tab.
Licensing: Metered Licenses Tab
Licensing: Service-Based Licenses Tab
Retrieving data ...