topic Re: how frequently XDR will push logs to Cortex? in Cortex XDR Discussions

how frequently XDR will push logs to Cortex?

VenkataAjay — Wed, 05 Jun 2024 18:51:51 GMT

Hi,

how frequently XDR will push logs to Cortex? We have application it will write logs 400k per sec and log rotation setup like if file size is 50 MB it will compress the file and zips it. due to this we are missing logs in cortex xdr.

can you please suggest any solution .

TIA.

Re: how frequently XDR will push logs to Cortex?

aspatil — Thu, 06 Jun 2024 11:47:29 GMT

Hello @VenkataAjay ,

How are the logs being collected?

Please confirm the log source.

Regards,

Ashutosh

Re: how frequently XDR will push logs to Cortex?

VenkataAjay — Mon, 10 Jun 2024 05:27:33 GMT

using xdr collector and configuration in filebeat.yml

Re: how frequently XDR will push logs to Cortex?

aspatil — Mon, 10 Jun 2024 05:34:43 GMT

Hello @VenkataAjay ,

If xdrc is not able to ingest at that rate, please get a tac ticket to confirm it is indeed the case and then have engineering confirm on any workaround.

Hope this helps!

Please hit the like and If you feel this has answered your query, please let us know by clicking on "mark this as a Solution".