The amount of disk space required for the Manager/ Central Manager depends on factors unique to the deployment scenario.
The considerations for the Manager/Central Manager virtual machine disk space are as follows:
- Trellix IPS Manager — The disk space required for the Manager mainly determines the size of the Manager database (MariaDB). This decides the number of alerts and packets logs that can be stored. The recommended disk space for the Manager is 300 GB, but it varies based on the deployment scenarios. For example, if you want store alerts and packet logs for 30 days, the recommended disk space is 500 GB.
- Trellix IPS Central Manager — The disk space required for the Central Manager mainly determines the size of the Solr database. This decides the number of alerts and packets logs from the Managers that can be displayed in the Central Manager. The MariaDB in the Central Manager occupies a smaller amount of disk space and stores the configuration information of the Central Manager. The overall disk space recommended for the Central Manager is 500 GB.
As a best practice, Trellix recommends archiving and deleting old alert data regularly and trying to keep your active database size to about 60% of the disk space.