topic Re: XDR agent quota exceeded in Cortex XDR Discussions

XDR agent quota exceeded

MahmudHKamol — Mon, 17 Apr 2023 07:43:10 GMT

We were monitoring the XDR Agent Audit logs and found out a lot of agents have this alert Quota Exceeded: "XDR agent quota exceeded on ******."

Can anyone explain this?

Re: XDR agent quota exceeded

mavraham — Mon, 17 Apr 2023 11:12:55 GMT

Hi @MahmudHKamol, thank you for reaching out to Live Community.

This message usually refers to the agent quota setting that is defined in the agent settings profile. The default disk space allocated for agent logs is 5000MB, you can increase it up to 10,000 by creating a new agent settings profile.

If the problem persists I would advise opening a support ticket through our customer support portal.

Hope this helps!

Re: XDR agent quota exceeded

MahmudHKamol — Mon, 17 Apr 2023 11:28:42 GMT

Hi @mavraham, thanks for the explanation. What happens when an agent log reaches the allocated space (5000 MB)? Does it overwrites the old logs? or it deletes it's whole log and starts from fresh?

Re: XDR agent quota exceeded

mavraham — Mon, 17 Apr 2023 14:31:38 GMT

Hi @MahmudHKamol,

You are correct. It will overwrite old logs, not all of them at once.

Re: XDR agent quota exceeded

A.Dhade — Thu, 06 Mar 2025 13:37:35 GMT

Hey there @mavraham, if this XDR agent quota exceeded problem persisted for a prolonged period what will be the consequences, will it result in the XDR agent stop to send data over the console?