Running SC 2.4 standalone on an i9-12900H

[unacomn]

Hey there folks. I was wondering if any of you have any feedback on a plan me and a buddy came up with to monitor some locations with SecurityOnion 2.4. We were thinking of setting up SecurityOnion 2.4 on Minisforums MS-01 workstations, which come equipped with Intel i9-12900H CPUs. On paper, it sounds like an OK CPU, it's low power compared to a desktop variant, but not really that low power. We're not sure if we should take the plunge and buy one to see if it works, because if it doesn't we'd have some explaining to do to people who have already have very little interest in budgeting for security.
The 2.4 documentation uses "CPUs" when talking about requirements, and that's as vague as it can be, instead of saying "threads" or "cores" or "cpus with a specific number of cores".
The locations in question don't really have great internet connectivity, so forwarding logs to an actual server won't work most of the time. They wouldn't be large networks, at most 10 computers, I'd say, with some industrial equipment. My buddy suggests that in the eventuality that someone downloads a virus, as one does, it'd cause enough traffic to swamp that CPU.
Has anyone else tried running SO 2.4 on a similar system? Is it something that is manageable? Or should we abandon this train of thought?

[dougburks]

The 2.4 documentation uses "CPUs" when talking about requirements, and that's as vague as it can be, instead of saying "threads" or "cores" or "cpus with a specific number of cores".

Have you read the complete Hardware Requirements page? CPU cores are specified in many different sections:
https://docs.securityonion.net/en/2.4/hardware.html

[unacomn]

Thank you, I'm not sure how I missed that.