10GB per day of third-party data for Falcon Insight XDR customers
Catalog row in Vendor License Rules · Cited
- Kind
- Entitlement
- Statement
- Falcon Next-Gen SIEM FAQ (2024-10-21): all Falcon Insight XDR customers with a dedicated CID may ingest up to 10GB of third-party data per day at no additional cost; data above the daily limit is not ingested unless the customer holds an extended subscription. The free tier carries 7-day retention and excludes premium features such as correlation rule templates and third-party Falcon Fusion SOAR actions.
- Applies when
- Using Next-Gen SIEM with a Falcon Insight XDR (for example Falcon Enterprise) subscription.
- Applies to
- Falcon Next-Gen SIEM; Falcon Insight XDR.
- Related metrics