integration indicator pull limits?

[boweic]

Hi there,

I've just started testing threat feed integration in XSOAR.

For some reason, the integration instance was only downloading 100 indicators on each pull whereas the source has thousands.

Is it because my AWS instance doesn't have a license?

Is there a limit on how many indicators can be downloaded into XSoar?

Thanks in advance!

[MBeauchamp2 · Accepted solution]

Correct, you'll need the Threat Intel Management license to pull full feeds - https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-9/cortex-xsoar-admin/cortex-xsoar-overview/c...