Is there a way to determine the total size of logs collected by RSA Security Analytics over the course of a day?
Run a query with this:
Summarize = Session Size
Select = did
Alias = Log Decoder
Where = the Log Decoder name(s), you have none, leave blank
Then = If you want to break it down by type.
The output will the total capture with the time frame you select in your report.