Hello

We use SNARE for our windows event logs.  We still see our 8 core 24G memory machine running running at 80-90% CPU utilization when sending 1308 EPS (1304 EPS syslog, 4 EPS windows)

For sizing purposes would you class SNARE syslogs as a winLog or as a syslog when looking at your sizing requirements  - https://www.manageengine.com/products/eventlog/system_requirement.html?

James