Next-Gen SIEM licensed on ingestion volume and retention
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- Falcon Next-Gen SIEM FAQ (2024-10-21): licensing is based on data ingestion volume and the length of retention; capacity can be scaled and additional data capacity bought. Default retention is 7 days, extendable up to 36 months with the appropriate licensing.
- Applies when
- Sizing Falcon Next-Gen SIEM for third-party log sources.
- Applies to
- Falcon Next-Gen SIEM.
- Related metrics