cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

XDR Agent Quota Exceeded

L0 Member

Hello, 

 

We receive numerous alerts of "XDR agent quota exceeded on ****"

I understand this means that the default storage is being exceeded but what exactly does that entail?

 

1. Are the old logs not being overwritten in time causing the alert to set off since the space has been exceeded? is it actually going over the default space or is there a hard stop where logs wont be collected?

2. Does cortex generate this alert any time an old log is overwritten?

3. Is there anyway to stop these alerts from happening without increasing the storage space?

Who Me Too'd this topic