Can Cortex Data Lake be converted back to the 100 GB free Storage included logging service after it was merged to a paid Cortex Data Lake?

Can Cortex Data Lake be converted back to the 100 GB free Storage included logging service after it was merged to a paid Cortex Data Lake?

4334
Created On 10/18/19 14:10 PM - Last Modified 06/14/23 10:05 AM


Question


Can Cortex Data Lake (CDL) be converted back to the 100 GB free Storage included logging service after it was merged to a paid CDL?

Environment


Cortex XDR

Answer


No, it cannot. 
Activating the paid CDL converts the free logging service into the paid one. Logs should stay untouched in this workflow.
The merger will not add 100 GB on top of the 1 TB, it is a conversion from free to paid CDL.  
It is not possible to convert it back to 100 GB free logging service.
When customers upgrade to the paid tier, they are no longer eligible for the free 100 GB of Logging Service data storage. 
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PN5gCAG&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail