topic Re: The data ingestion dashboard and datasets do not correspond in Cortex XDR Discussions

The data ingestion dashboard and datasets do not correspond

Grady — Mon, 21 Mar 2022 11:37:37 GMT

Recently, by purchasing a per TB licence, I integrated the logs of the Fortinet firewall, but I found that the daily data volume in the data ingestion dashboard and the log volume in the Fortinet datasets do not match. The dataset of the Fortinet only shows 411G. According to the data ingestion dashboard, the total number should be 592G. I checked other datasets and found no mixing of Fortinet logs. Has anyone encountered this situation?

Re: The data ingestion dashboard and datasets do not correspond

fmoixsante — Mon, 21 Mar 2022 13:20:17 GMT

Hi @Grady

I am taking note of this behavior and I will contact our internal teams to inquiry more about this discrepancy. I will post back here as soon as I have more information.

Re: The data ingestion dashboard and datasets do not correspond

Grady — Wed, 23 Mar 2022 07:42:11 GMT

Hi @fmoixsante

Thank you for your feedback, is there any news, there is no malicious intent, I just want to ask if this is a bug?