how frequently XDR will push logs to Cortex?

[VenkataAjay]

Hi, 

how frequently XDR will push logs to Cortex? We have application it will write logs 400k per sec and log rotation setup like if file size is 50 MB it will compress the file and zips it. due to this we are missing logs in cortex xdr.

can you please suggest any solution .

TIA.

[aspatil]

Hello @VenkataAjay ,

How are the logs being collected?

Please confirm the log source.

Regards,

Ashutosh

[VenkataAjay]

using xdr collector and configuration in filebeat.yml

[aspatil]

Hello @VenkataAjay ,

If xdrc is not able to ingest at that rate, please get a tac ticket to confirm it is indeed the case and then have engineering confirm on any workaround.

Hope this helps!

Please hit the like and If you feel this has answered your query, please let us know by clicking on "mark this as a Solution".