Sizing NLS for new environment

[gregwhite]

Our current log server environment is a 2-node cluster with 24g memory and 2-cpu 2.4ghz 8-core. We have 2TB on each node. It is currently receiving logs from 540 network routers and switches. The data is being kept active for 3 months. We are looking to add our window servers and linux servers which would add about 1000 devices. Can you recommend what we should be considering? Is there an application limit on memory? Would upgrading the servers to 128g apiece be wasted? Should we consider a 4-node cluster? Is there a way to estimate additional disk space?
Any suggestions would be appreciated.

Thanks,
Greg

[cdienger]

The limit to memory is 64GB on a system - anything more will have a negative impact on performance. To get an idea of the space need you can look at Admin > System > Cluster Status and look at the size of indices and the total size of the database. With more nodes in a cluster the files that make up the database will be spread across more nodes and give you generally better performance.

[gregwhite]

Thanks!!

[cdienger]

No problem