Pull data from XDR through API

[Shashanksinha]

Is there a limit to pull data from  XDR through API?

I understand that query through API has limit but what if we are pulling endpoint information/alerts/incidents through it?

[neelrohit]

Hi @Shashanksinha ,

Thank you for writing to live community!

The maximum amount of incidents per API fetch cannot exceed 100. 

Hope this helps! Please mark this response as "Accept as Solution" if it answers your query

Regards

[etugriceri]

There are additional two limits. 

1 - Compute unit license. If you are executing heavy queries and consuming all of your Compute Unit license, You might not get data. 
2 - General data availability of your data. If you dont have a retention license, with basic license, you can get max 6 months for incident/alert data and 30 days for endpoint related data.