# Sizing elk for SIEM(security) use case

**URL:** <https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178>\
**Category:** Elastic Security\
**Created:** [January 1, 2024, 11:06am UTC](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178 "2024-01-01T11:06:11Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [January 1, 2024, 4:42pm UTC](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178/3 "2024-01-01T16:42:52Z")

</div>

Closed duplicate of

> [@How much cpu power needed for elk consider security use case?](https://discuss.elastic.co/t/how-much-cpu-power-needed-for-elk-consider-security-use-case/350179):
>
> elk documentation say that for every 20 shard we need 1 gb ram what about cpu?

---

_[View the full topic](https://discuss.elastic.co/t/sizing-elk-for-siem-security-use-case/350178)._