Hello everyone, can you help me how to size my elk as SIEM? any thoughts or resources can help please give to me. Thanks in advance.

I posted a reply on your other thread, which this basically seems to be a duplicate of, so lets continue the discussion there.

Closed duplicate of [image] How much cpu power needed for elk consider security use case? Elastic Security elk documentation say that for every 20 shard we need 1 gb ram what about cpu?

Discuss the Elastic Stack

Sizing elk for SIEM(security) use case

Elastic Security

stephenb (Stephen Brown) January 1, 2024, 4:42pm 3

Closed duplicate of

Topic		Replies	Views
System requirements for ELK SIEM Elastic Security elastic-stack-monitoring , docker	2	1302	August 6, 2021
ELK installing Elasticsearch	1	181	April 14, 2022
Sizing Elastic Stack for a PoC (security use case) Elastic Security	7	667	February 11, 2024
System requirements for Elastic Security "All-in-One" pilot deployment SIEM	4	78	May 1, 2026
Elastic SIEM - Hardware specs Elastic Security	4	282	February 5, 2025

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Sizing elk for SIEM(security) use case

Related topics