Disk requirements

Disk type

The disk type depends on the number of events per second (EPS) to be processed by Kaspersky CyberTrace:

• If the EPS is not more than 10,000, you can use a hard disk drive (HDD).
• If the EPS is more than 10,000, a solid-state drive (SSD) is recommended.

Free disk space

The amount of free disk space is calculated separately for the following data:

• System files, statistics, and other service data.
• Saved detections.
• Retrospective scan data.
• Indicators.

After that, the resulting values are summed to receive the total value.

Disk space for system files, statistics, and other service data

It is required to have about 1 GB of free disk space for each month of storing statistics (statistics are stored for up to three months).

Disk space for saved detections

This value is calculated as follows:

<disk space> = <EPS> x <detection rate> x <detection size> x 3600 x 24 x <statistics storing period>

Here:

• <EPS>—Number of events per second to be processed by Kaspersky CyberTrace.
• <detection rate>—Approximate percentage of detections against EPS. Can be set to 0.02% or 0.0002.
• <detection size>—Approximate size of each detection event. Can be set to 2.5 KB.
• <statistics storing period>—Number of days during which events used for the retrospective scan are stored.

Disk space for retrospective scan data

This value is calculated as follows:

<disk space> = <EPS> x <event size> x 3600 x 24 x <retention period for retroscan>

Here:

• <EPS>—Number of events per second to be processed by Kaspersky CyberTrace.
• <event size>—Approximate size of each saved event. Can be set to 0.25 KB.
• <retention period for retroscan>—Number of days during which results of the retrospective scan are stored.

Disk space for indicators

This value is selected as follows:

• If you use demo feeds, the value is 0.37 GB.
• If you use a typical set of commercial feeds, the value is 6 GB.
• If you add or remove feeds that you use, the value will be increased or decreased accordingly.