To my understanding a VLC can compress logs before they are forwarded to a log decoder. At what point do the logs get compressed? I am asking because I want to know how much storage capacity to allocate for a VLC's "buffer" - should I simply calculate it using the size of the raw events collected by the VLC? I.e. if I collect 50 GB per day, and I wish to allocate a buffer for 24 hours, should I allocate 150 GB (recommended by sadocs) plus 50 GB for the actual buffer?