Skip to main content
Palo Alto Networks Cortex XCOR logs have a variety of limits, depending on where your data is in the processing cycle. Your license limits the amount of data you can write to and store within Cortex XCOR. Logs have the following size limits, which help ensure consistency and prevent issues with queries:
  • Individual logs exceeding 1 MB are dropped.
  • Label keys and values exceeding 1,024 characters are truncated to adhere to the 1,024 character limit.