Learn how to estimate your XDR for Cloud data usage.
Before enabling XDR for Cloud features and deploying the stack template, consider
the following recommendations when estimating how many GB of data will consume credits
for each month.
-
Estimating data usage: Trend Micro recommends going to Metrics in the AWS CloudWatch console to view the size of the S3 buckets storing your AWS CloudTrail, AWS VPC Flow Logs, and Amazon Security Lake data. Use this past usage information to estimate your future data usage.
-
Compressed data: AWS CloudTrail and Amazon Security Lake data logs are stored in compressed format in the AWS console. When analyzed in Trend Vision One for XDR Threat Detections, the data is uncompressed. To account for this, Trend Micro recommends allocating 8 to 10 times more data usage in Trend Vision One than the size shown in AWS. For example, if the S3 bucket storing your data is 10 GB in size in the AWS console, you should allocate credits for 80 to 100 GB of data usage over the year in Trend Vision One.
-
Uncompressed data: Because the volume of log data for AWS VPC Flow Logs is not compressed in AWS, you can use the volume as a direct estimate of how many GB of data you need for AWS VPC Flow Logs in Trend Vision One.
To monitor your XDR for Cloud usage, go to Cloud Accounts and click Manage usage.