Is there a maximum size limit on data that Panther ingests?
Natively Supported Log Sources
When ingesting data from natively Supported Log Sources, Panther already takes the data size into account, and created native Log Source integrations with that in mind.
Custom Log Sources
When using a Custom Log Source, you can send arbitrary data to Panther. Therefore some consideration should be made into the size of the data you are sending.
The maximum size for a single log event is 15MB.
However, when using log sources such as S3 and GCS, you can send objects that contain many events. Usually these objects are compressed, so they can store many different events. For this scenario there is not necessarily a size limit, but Panther does recommend to keep these objects within 20-30MB.