Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 2552 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disk-space requirements to enable Auditing in the Console?

RichardKeel

What are the additional disk-space requirements to enable Auditing in the Console? I've been asked to enable auditing, but need to factor in the potential risk of eating disk space.

We have approx 2900 managed clients, if it helps.



This thread was automatically locked due to age.
Parents
  • 0

    HI,

    Auditing events are kept in a separate database (SophosSecurity) and it can be enabled/disabled at any time.

    It really depends on how many changes you are making.

    I would suggest to enable it in the console, check on the database size on disk after say 1 week, then again after 2, 3, 1 month, etc.. to see how it's growing.

    You may also want to connect to the database with a client, e.g. SQL Management Studio or even Excel as per:
    https://www.sophos.com/en-us/medialibrary/PDFs/documentation/sec_54_auditeng.pdf to see how many records per table you are getting.

    It will not cause any immediate problems as there isn't that much data stored.

    Regards,

    Jak

Reply
  • 0

    HI,

    Auditing events are kept in a separate database (SophosSecurity) and it can be enabled/disabled at any time.

    It really depends on how many changes you are making.

    I would suggest to enable it in the console, check on the database size on disk after say 1 week, then again after 2, 3, 1 month, etc.. to see how it's growing.

    You may also want to connect to the database with a client, e.g. SQL Management Studio or even Excel as per:
    https://www.sophos.com/en-us/medialibrary/PDFs/documentation/sec_54_auditeng.pdf to see how many records per table you are getting.

    It will not cause any immediate problems as there isn't that much data stored.

    Regards,

    Jak

Children
No Data
Unfiltered HTML