# Preserve Original **URL:** \ **Category:** Elastic Security\ **Created:** [November 12, 2024, 12:08pm UTC](https://discuss.elastic.co/t/preserve-original/370394 "2024-11-12T12:08:57Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![aravindraja](https://avatars.discourse-cdn.com/v4/letter/a/edb3f5/32.png) [@aravindraja](https://discuss.elastic.co/u/aravindraja)\ **Post date:** [November 12, 2024, 12:08pm UTC](https://discuss.elastic.co/t/preserve-original/370394/1 "2024-11-12T12:08:57Z")
Hi Team, By enabling the preserve original in my integration would actually consume large amount of disk space in my elastic server? Thanks in advance ---
**Author:** ![sholzhauer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sholzhauer/32/110282_2.png) [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\ **Post date:** [November 13, 2024, 1:09pm UTC](https://discuss.elastic.co/t/preserve-original/370394/2 "2024-11-13T13:09:36Z")
preserving the original would indeed add storage consumption. What this will do is store the original "raw" event in the `event.original` as text field. In my experience it is not significant (doubling or something like that). But as text fields are "not optimized", you will notice that your disk utilization increases when dealing with bulk (all events). Wheter or not to enable this depends on your usecase and requirements, if you are only interested in monitoring and searching it does not add value. It might (press f to doubt) add value during investigation but all information should be parsed into usable distinct fields any way. The only real reason where i can see it is applicable is when for audit/compliance purpose you would need to store the orignal raw event. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 11, 2024, 1:10pm UTC](https://discuss.elastic.co/t/preserve-original/370394/3 "2024-12-11T13:10:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.