Why can I ingest more data than I'm licensed for?
From time to time, you may encounter a spike in events that surges your the ingestion volume of your deployment. Stellar Cyber has included an ingest buffer in anticipation for such a situation. However, do not operate your system beyond your licensed volume for an extended amount of time. There are potential problems, such as slow performance and memory heap overflow, that cascade from persistent overuse. If your daily ingestion volume exceeds your licensed volume for five or more consecutive days, you will receive a red banner at the top of your screen (like the example in this posting). Contact your Stellar Cyber representative to discuss options to increase your licensed volume or other ways to optimize your environment.