Know exactly what's included in your license and estimate any extra storage you may need, all in one place.
Estimate the storage your environment needs by entering the number of components and choosing your retention period. The bundled allocation supports 30 days of Search retention and 12 months of Archival retention. You can also calculate extended retention here, and any period beyond the bundled limits will require additional storage.
Log360 Cloud uses an infrastructure-based licensing model. Each monitored component includes bundled storage for Search and Archival needs.
Indexed storage used for fast-query investigations and threat hunting.
Storage used for long-term retention and audit needs. The Archival allocation is higher than the Search allocation for every component unit.
The bundled allocation per unit is listed below. All storage is pooled at the storage level and not assigned to individual assets.
| Component | Search / Unit | Archival / Unit |
|---|---|---|
|
Log Sources
Windows Servers, Linux/Unix, Firewalls, Routers, Switches, IDS/IPS, AS400, Microsoft SQL Server, IIS Sites, Salesforce and other sources.
|
15 GB | 180 GB |
|
Endpoints
Windows workstations
|
2 GB | 24 GB |
|
File Servers
Windows file servers and NAS devices
|
50 GB | 600 GB |
|
Domain Controllers
Active Directory domain controllers
|
50 GB | 600 GB |
|
Cloud Accounts
AWS accounts and Microsoft 365 tenants
|
100 GB | 1.2 TB |
The bundled allocation covers 30 days of Search retention and 12 months of Archival retention. If your organization plans to retain data for longer than these baselines, add-on storage becomes necessary. You may also need add-on storage if your environment generates a high volume of logs, because heavy ingestion burns through the bundled storage faster.
Add-on storage for Search and Archival is purchased separately and is pooled with what’s already included in your license.
ManageEngine is a division of Zoho Corp.