Views:

Learn how to estimate and monitor your XDR for Cloud data usage.

XDR for Cloud requires credits when enabled for your cloud accounts. The credit requirement is calculated based on your specified data allowance, or how many GB of data you estimate will be uploaded to Trend Vision One over the year. For more information on the credit requirements of XDR for Cloud features, see Credit requirements for Trend Vision One apps and services.
XDR for Cloud includes the following features:
  • Cloud Detections for AWS CloudTrail
  • Cloud Detections for AWS VPC Flow Logs
  • Cloud Detections for Amazon Security Lake
Before enabling XDR for Cloud features and deploying the stack template, consider the following recommendations when estimating how many GB of data to allocate credits for in the coming year:
  • Trend Micro recommends going to Metrics in the AWS CloudWatch console to view the size of the S3 buckets storing your AWS CloudTrail and AWS VPC Flow Logs data, and using this past usage information to estimate your future data usage.
  • Because the volume of log data for AWS CloudTrail is compressed in the AWS console, Trend Micro recommends specifying a data allowance that is 8 to 10 times larger in Trend Vision One. For example, if the S3 bucket storing your AWS CloudTrail data is 10 GB in size in the AWS console, you should allocate credits for 80 to 100 GB of data usage over the year in Trend Vision One.
  • Because the volume of log data for AWS VPC Flow Logs is not compressed in AWS, you can use the volume as a direct estimate of how many GB of data you need for AWS VPC Flow Logs in Trend Vision One.
To monitor your XDR for Cloud usage, go to Cloud Accounts → Credit Settings to view a graph of your past data usage from both log sources.