Falcon module data carries no additional ingestion charge
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- Falcon Next-Gen SIEM product page: data from licensed Falcon modules, including endpoint, identity, cloud and other Falcon telemetry, is available in Falcon Next-Gen SIEM without additional ingestion charges. Only third-party data counts toward purchased ingest capacity. (vendor page undated; as published on 2026-09-26)
- Applies when
- Estimating which data sources consume Next-Gen SIEM capacity.
- Applies to
- Falcon Next-Gen SIEM.
- Related metrics