topic Re: Maximum telemetries data that can be stored offline in Cortex XDR Discussions

Maximum telemetries data that can be stored offline

tmeksik — Tue, 22 Jul 2025 09:30:51 GMT

Hi team

Is there a cap for how much telemetries data can be stored offline? Or does it simply depend on how much disk space is available?

I am wondering if an agent has stayed disconnected for an extended period, would it be able to upload all telemetries and alert data once it comes back online?

Thanks!

Re: Maximum telemetries data that can be stored offline

eluis — Tue, 22 Jul 2025 13:11:15 GMT

Hi Tmeksik,

The agent can get up to 200Mb for storing logs in case a network disruption occurs (cache).

The former is true if there are 200MB available on your file system or more than that.

So 200mb being the max cache capacity if available space on disk.

It might be that even the agent is disconnected from network for long time, if there is not much activity, those 200Mb will be more than enough.

If you need more than that, we recommend that you contact support to see if something can be done or is feasible/possible per use cases.

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR,

Luis

Re: Maximum telemetries data that can be stored offline

tmeksik — Tue, 22 Jul 2025 22:23:38 GMT

Thanks Luis. Just after I posted this though, I came across the disk quota under Agent Settings profile where it was default to 5000MB. Isn't this actually the local storage where the agent can cache the logs/telemetries?