Know exactly what's included in your license and estimate any extra storage you may need, all in one place.
Estimate the storage your environment needs by entering the number of components and choosing your retention period. The bundled allocation supports 30 days of Search retention and 12 months of Archival retention. You can also calculate extended retention here, and any period beyond the bundled limits will require additional storage.
Both requirements are fully covered under the bundled allocation. No add-on storage needed.
Actual storage consumption may vary depending on log volume and data ingestion patterns.
Have your estimate? Head to Get Quoteto request pricing based on your storage needs.
Log360 Cloud uses an infrastructure-based licensing model. Each monitored component includes bundled storage for Search and Archival needs.
Search Storage refers to the storage used for actively searchable logs. These logs are indexed and available for search, reports, alerts, investigations, and analysis.
Archival Storage refers to the storage used for retaining older logs for long-term retention and compliance purposes. These logs are preserved for future reference, but are not primarily meant for active day-to-day searches.
The bundled allocation per unit is listed below. All storage is pooled at the storage level and not assigned to individual assets.
| Component | Search / Unit | Archival / Unit |
|---|---|---|
|
Log Sources
Windows Servers, Linux/Unix, Firewalls, Routers, Switches, IDS/IPS, AS400, Microsoft SQL Server, IIS Sites, Salesforce and other sources.
|
15 GB | 180 GB |
|
Endpoints
Windows workstations
|
2 GB | 24 GB |
|
File Servers
Windows file servers and NAS devices
|
50 GB | 600 GB |
|
Domain Controllers
Active Directory domain controllers
|
50 GB | 600 GB |
|
Cloud Accounts
AWS accounts and Microsoft 365 tenants
|
100 GB | 1.2 TB |
The bundled allocation covers 30 days of Search retention and 12 months of Archival retention. If your organization plans to retain data for longer than these baselines, add-on storage becomes necessary. You may also need add-on storage if your environment generates a high volume of logs, because heavy ingestion burns through the bundled storage faster.
Add-on storage for Search and Archival is purchased separately and is pooled with what’s already included in your license. For every 1 GB of Search storage purchased, 3 GB of Archival storage is automatically included.
No. It is not recommended to directly compare the archival storage calculation of Log360 On-Premises with Log360 Cloud because the storage calculation approach is different for each deployment model.
In Log360 Cloud, storage is calculated based on the normalized incoming log volume.
For example, if the incoming log volume is 6 GB per day:
| Retention Type | Retention Period | Storage Required |
|---|---|---|
| Search Storage Retention | 30 days | 180 GB |
| Archival Storage Retention | 90 days | 540 GB |
This is the expected storage behavior in Log360 Cloud.
A compression ratio is not applicable for comparing Search Storage and Archival Storage in Log360 Cloud.
In Log360 Cloud, both Search Storage and Archival Storage are calculated based on the normalized incoming log volume. The difference between them is based on their purpose and the configured retention duration.
Search Storage is used for live, actively searchable logs that support search, reports, alerts, investigations, and analysis. Archival Storage is used for long-term log retention and compliance needs.
Because both storage types follow the same incoming log volume calculation, the archival storage size may appear in line with the search storage size. This is part of the expected Cloud storage behavior.
Search Storage and Archival Storage are priced differently based on their purpose. Search Storage is designed for active search, indexing, reports, alerts, investigations, and analysis. It uses high-performance storage infrastructure to deliver faster query results and real-time access to logs. Archival Storage is mainly intended for long-term retention and compliance. It uses cost-optimized storage where retrieval is slower, as these logs are not meant for active day-to-day searches. Although the displayed storage size may appear similar, Archival Storage is priced at only 2% of the Search Storage cost. This makes it a highly economical option for retaining logs over a longer period.
If the allocated Search Storage or Archival Storage is fully utilized before the expected retention period, administrators will be notified, and the system behavior will depend on the configured storage handling option.
By default, the system follows the Stop Log Collection option.
Stop Log Collection
Log ingestion will be halted entirely when the storage limit is reached. Existing data will be preserved, and administrators will be notified.
Overwrite Old Logs
The Overwrite Old Logs option can be used to prioritize the retention of critical logs by allowing older, low-priority logs to be overwritten.
Note: Regardless of the configured storage handling option, once the storage limit is reached, log collection will be impacted, which may result in log loss and impact compliance and audit continuity. To avoid this, we recommend purchasing additional Search Storage or Archival Storage based on your requirements.
If your organization requires search retention beyond 3 months or archival retention beyond 10 years, contact our support team for a custom storage assessment and pricing at sales@manageengine.com.
ManageEngine is a division of Zoho Corp.