Hello, everyone comparison of various storage space types.
| Storage Space Types | Storage Mode | Query Speed | Space Usage (with the Same Log Amount) | Description |
| Online log storage space | Original logs | Fastest | Large | l Generally, logs in the online log storage space are the latest logs. l Besides log files, index files corresponding to session logs among the online logs are also saved in the online log storage space. l The log query speed is the fastest because the logs are not compressed. However, with the same log content, these logs occupy a larger storage space. l Generally, it is recommended that ratio of the online log storage space to the dumped log storage space be set to 3:7. l It is recommended that independent disk partitions be allocated to online log storage space and dumped log storage space to avoid uncontrollable unknown issues caused by mutual space occupation. |
| Dumped log storage space | Compressed logs | Faster | Small (The compressed logs occupy 40% of the space required before log file compression.) | l When logs in the online log storage space meet a certain condition, the LogCenter compresses the earliest logs in the online log storage space and dumps the compressed logs to the dumped log storage space. l Besides compressed log files, index files corresponding to session logs among the online logs are also saved in the dumped log storage space. l When you query a log in the dumped log storage space, the LogCenter decompresses the corresponding log to the temporary space and then provides query results to you. Due to the decompression procedure, the query speed of a dumped log file is slower than that of an online log file. However, if the query content is not excessive, you cannot obviously feel the differences. l Generally, it is recommended that ratio of the online log storage space to the dumped log storage space be set to 3:7. l It is recommended that independent disk partitions be allocated to online log storage space and dumped log storage space to avoid uncontrollable unknown issues caused by mutual space occupation. l Index files are not compressed. |
| Remote backup log space | Compressed logs | The system copies log files to the original space for querying. After the log files are copied to the original space, the query speed is faster. | Log files do not occupy the disk space of the collector. | l If the remote backup function is enabled, when logs in the dumped file storage space meet a certain condition, the LogCenter dumps the earliest log files to a disk space other than the collector in FTP or SFTP mode. l Before enabling the remote backup operation, set the destination path to the FTP/SFTP server. Set a storage directory for the backup logs, and create user names and passwords of FTP/SFTP users who have rights to access this path. l To query backup logs, you need to copy the log files to the collector and then query the logs. |
