License and Unused Events

[AliMhaerFathy]

Hi Guys,

Hope you have a great day!

As per the below screen, I seek to know the actual meaning of the Unused events:

[sioannou]

Hi @AliMhaerFathy ,

On a functional level, unused events help you cover sudden increases in EPS (i.e. during an attack devices tend to be more verbose, a firewall can easily go from 400EPS to 2,500 during an attack). 

Also a second point is to give you time when you need to upgrade your license. 

For more details on the internals of the EPS Architecture I suggest to review the FCSS - Advanced Analytics Self-Paced course on NSE Training - Section Operating Collectors - Chapter EPS Architecture. 

Hope the above helps. 

Regards,

S