LICENSEWARE
Sophos Rule

Data Lake storage and query limits per XDR and EDR subscription

Catalog row in Vendor License Rules · Cited

Kind
Consumption
Statement
Licensing Guidelines: Sophos XDR per Server includes 500MB daily storage with maximum 90 days storage and 1,000 daily Data Lake API queries; XDR per User 20MB daily with 90 days; EDR per Server 40MB daily with 30 days; EDR per User 20MB daily with 30 days. The Fusion Data Storage 1-year Pack extends retention and is licensed on the combined number of Users and Servers.
Applies when
Sizing data retention and Data Lake use.
Applies to
Sophos XDR and Sophos EDR (User and Server).
Related metrics
Esc