What are the recommended partition sizes for a log server of 10TB ?

[Ven]

Hello Experts, 

What is the recommended partition sizes (System-swap, System-root, Logs, Backup and Upgrade) for a R81.20 log server of 10TB. This log server forwards logs to SIEM through OPSEC. 

[emmap · Accepted solution]

You can only directly affect root and logs, the rest will manage themselves based on amount of installed RAM (for swap) and configured root partition size (for backup and upgrade). 

Unless this is an MDLS with a lot of DLSs on it, a 200GB root partition is plenty (probably overkill but it's what our large Smart-1 hardware used to default to) and however large the installer will let you go for logs.

Yes you can mess with partitions later after it's installed to claim more of the unpartitioned space, but don't because you'll just end up causing future you problems when it comes to taking snapshots and performing future upgrades. 

[kamilazat]

I understand how it would cause issues with snapshots as taking a snapshot creates an additional partition. But how could it cause issues with upgrades?

[G_W_Albrecht]

With upgrades, a snapshot is stored before performing the upgrade. If the upgrade fails, it reverts to this snapshot.