Log Storage Cost Calculator
Disk is the fastest-growing item in SIEM cost. Estimate your annual raw log volume and your projected disk need with Oriana's deduplication + compression architecture, based on your EPS, average event size and retention period.
The Oriana figure comes from the archive ratio in our published reference configuration table. It is a conservative planning value; compression goes much further in internal tests. The index-based figure assumes a representative 30% overhead, as an indication rather than a measurement. We measure your actual ratio together in a PoC. Where the numbers come from: performance test methodology.
Retention drives cost
Two-year retention doubles the disk requirement compared to one year. With Oriana, hot data stays on SSD while the archive lives on HDD or object storage — and older records are queried without pulling data back from the archive.
Data lives on disk, not in RAM
Elasticsearch-based stacks lean on RAM and index files for fast search; live data stays hot for a short window, and the server bill grows with log volume. Oriana has no index layer. Data sits on disk, and queries still come back in milliseconds: 0.95 ms on average in internal tests.
Compression down to 1/40 on disk
Since we keep data on disk for years, compression is not an add-on for us: it is the architecture itself. The patented Minimize algorithm compresses archived data down to 1/40 in internal tests, so roughly 40 GB of logs takes up 1 GB on disk. Deduplication strips repeating records on top. Ratios vary with your data set and are measured in the PoC.
Want to measure the real ratio on your own log data?
In a PoC we measure your deduplication ratio, disk consumption and query times together, and report the results in a format you can take straight into budget planning.