Skip to main content
Panther Knowledge Base

Is there a maximum size limit on data that Panther ingests?

  1. Last updated
  2. Save as PDF

QUESTION

 Is there a maximum size limit on data that Panther ingests?

ANSWER

Natively Supported Log Sources

When ingesting data from natively Supported Log Sources, Panther already takes the data size into account, and created native Log Source integrations with that in mind.

Custom Log Sources

When using a Custom Log Source, you can send arbitrary data to Panther. Therefore some consideration should be made into the size of the data you are sending.

The maximum size for a single log event is 15MB.

However, when using log sources such as S3 and GCS, you can send objects that contain many events. Usually these objects are compressed, so they can store many different events. For this scenario there is not necessarily a size limit, but Panther does recommend to keep these objects within 20-30MB.