Resource Planning

A non-administrator IAM account that has the SecMaster data collection management permission.

The following table lists the specifications of the tenant cloud server (ECS) where the collector (isap-agent + Logstash) is installed.

**Table 1** ECS specifications
vCPUs	Memory	System Disk Size	Data Disk Size	Collector Capacity (Reference)
4	8 GiB	50 GiB	100 GiB	4,000 EPS @ 500 B
8	16 GiB	50 GiB	100 GiB	10,000 EPS @ 500 B
16	32 GiB	50 GiB	100 GiB	20,000 EPS @ 500 B
32	64 GiB	50 GiB	100 GiB	40,000 EPS @ 500 B
64	128 GiB	50 GiB	100 GiB	80,000 EPS @ 500 B
Specifications description: 4000 EPS@500B: The log collector can process 4000 events per second. Condition: The size of an event is not larger than 500 bytes. Minimum ECS specifications: vCPUs: 2; Memory: 4 GB; System disk: 50 GB; Data disk: 100 GB. Architecture requirements: Currently, the log collection component controller (isap-agent) can run only on Linux and Arm64 ECSs. More will be supported in the future. OS (image): There is no restriction. Huawei Cloud EulerOS is recommended. The log volume usually increases in proportion to the server specifications. You are advised to increase the log volume based on the specifications in the table. If there is huge pressure on a collector, you can deploy multiple collectors and manage them centrally through collection channels. This can distribute the log forwarding pressure across collectors.