cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
494
Views
4
Helpful
3
Replies

CS MARS loggs

CSCO10320953
Level 1
Level 1

Hi,

Please tell me how much the volume size is required for 1 year logging for CS-MARS?

3 Replies 3

mohsin.khan
Level 3
Level 3

send a "pndbusage" command on CLI and you'll get to know.

At present i dont the devices,would u tell me approximater for 10 devices....PL

Instead of focussing on the volume/size you have to size you MARS appliance using the approximate number of EPS (Events per second) and the no. of Netflows per second.

You can get a sizing document from the Cisco Account team for this.

Once you have the box running you can adopt archiving, tuning etc. to ensure all data is 'avaialble' when required as per the compliance requirements.

Regards

Farrukh

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: