03-04-2024 10:25 AM - last edited on 04-18-2024 11:37 AM by emgarcia
After our Cortex XDR tenant was upgraded to 3.9 we started receiving the following error: "License Violation warning Based on a 7 day average calculation from February 24th 2024 to March 1st 2024, your daily ingestion quota is exceeded."
Looking at the Data Ingestion Dashboard it appears our NGFW data ingestion is reporting to has significantly increased since the upgrade. I checked the ACC monitor for Palo Alto Logging traffic on the firewall and it has not changed. The NGFW shows 500GB sent to Cortex Data Lake the last 7 days and the Cortex XDR Data Ingestion dashboard shows 3.87TB in the last 7 days.
I opened a case with support but wondering if anyone else has received this warning.
