Hi,
Does anyone have a ballpark figure for data volume from the Workday add-on into Splunk?
The final log volume output by the Add-on is dependent on the number of users and level of activity within the tenant. To estimate the volume that would be produced by your tenant, count the number of events in the View User Activity report in Workday over a representative time span (1 week, if possible) and multiply by 500 (average size of a single event in bytes).