Process document retention is primarily limited by total available disk storage. System performance is determined by disk IOPS and throughput.

We recommend using SSD drives on RAID 5 for all Carbon Black EDR deployments with 16,000 IOPS (250 MiB/s throughput) or equivalent performance characteristics.

We do not support network-attached storage (NAS) because NAS is often slower, displays larger latencies with a wider deviation in average latency, and is a single point of failure. We do not support NFS for similar reasons.