If an organization collects an average of 20,000 EPS over eight hours of an ongoing incident, that will require sorting and analysis of 576,000,000 data records. Using a 300 byte average size, that amounts to 172.8 gigabytes of data.
I'm not clear how this 172.8 was calculated. I know 576,000,000 was taken by multiplying 8 hours into seconds. Should i divide the 300 byte average size? Please help.