# Sizing elk for SIEM(security) use case

**URL:** https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178
**Category:** Elastic Security
**Created:** [January 1, 2024, 11:06am UTC](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178 "2024-01-01T11:06:11Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Ammar\_Mostafa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ammar_mostafa/32/122331_2.png) [@Ammar\_Mostafa](https://discuss.elastic.co/u/Ammar_Mostafa)
#### Post date: [January 1, 2024, 11:06am UTC](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178/1 "2024-01-01T11:06:11Z")

</div>

Hello everyone,

can you help me how to size my elk as SIEM?  
any thoughts or resources can help please give to me.  
Thanks in advance.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 1, 2024, 1:14pm UTC](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178/2 "2024-01-01T13:14:10Z")

</div>

I posted a reply on your other thread, which this basically seems to be a duplicate of, so lets continue the discussion there.

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [January 1, 2024, 4:42pm UTC](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178/3 "2024-01-01T16:42:52Z")

</div>

Closed duplicate of

> [@How much cpu power needed for elk consider security use case?](https://discuss.elastic.co/t/how-much-cpu-power-needed-for-elk-consider-security-use-case/350179):
>
> elk documentation say that for every 20 shard we need 1 gb ram what about cpu?

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [January 1, 2024, 4:42pm UTC](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178/4 "2024-01-01T16:42:59Z")

</div>