Free Tool
BetaSIEM Sizing Calculator
Estimate the storage, compute, and cost requirements for your SIEM deployment. Designed for SOC architects and security engineers.
Contribute on GitHubopen-source dataQuick Sizing Estimate
Answer 2 questions and get an instant architecture recommendation.
SIEM Platform
Total employees in your organization (workstations, laptops...)
Firewalls, switches, routers, access points, proxies...
Recommended Architecture
Distributed
Separate Wazuh manager, indexer(s) and dashboard for better performance and resilience.
🖥️
1
Master node
💾
1
Indexer nodes
📊
1
Dashboard nodes
📡
0
Worker nodes
Estimated agents55
Estimated daily volume15.0 GB
Estimated storage (90 days)192.9 GB
| Component | Qty | vCPU | RAM | Disk |
|---|---|---|---|---|
| Master node | 1 | 4 | 8 GB | 50 GB |
| Indexer nodes | 1 | 4 | 8 GB | 193.0 GB |
| Dashboard nodes | 1 | 2 | 4 GB | 50 GB |
| Total | 3 | 10 | 20 GB | 293.0 GB |
With this volume, a distributed architecture is recommended to avoid performance bottlenecks on a single node.
You know which SIEM to pick. But what should you detect?
Our AI tool generates a personalized detection strategy based on MITRE ATT&CK and your industry. Free.
Need a SIEM? Deploy Wazuh in 5 minutes.
Dedicated server, pre-tuned rules, automatic SSL, backups. From €50/month.
No commitment — cancel anytime