Views:

Learn how to estimate and monitor your XDR for Cloud data usage.

XDR for Cloud requires credits when enabled for your cloud accounts. The credit requirement is calculated based on your specified data allowance, or how many GB of data you estimate will be uploaded to Trend Vision One over the year. For more information on the credit requirements of XDR for Cloud features, see Credit requirements for Trend Vision One apps and services.
XDR for Cloud includes the following features:
  • XDR for Cloud - AWS CloudTrail
  • XDR for Cloud - AWS VPC Flow Logs
  • XDR for Cloud - Amazon Security Lake
Note
Note
The data allowance for XDR for Cloud is the amount of data that can be uploaded from all log sources over the year. As of December 2024, only XDR for Cloud - AWS CloudTrail logs count towards the data allowance limit. Once Cloud Detections for AWS VPC Flow Logs and Cloud Detections for Amazon Security Lake officially release, data from all log sources count towards your data allowance for XDR for Cloud.
Before enabling XDR for Cloud features and deploying the stack template, consider the following recommendations when estimating how many GB of data to allocate credits for in the coming year:
  • Trend Micro recommends going to Metrics in the AWS CloudWatch console to view the size of the S3 buckets storing your AWS CloudTrail and AWS VPC Flow Logs data, and using this past usage information to estimate your future data usage.
  • Because the volume of log data for AWS CloudTrail is compressed in the AWS console, Trend Micro recommends specifying a data allowance that is 8 to 10 times larger in Trend Vision One. For example, if the S3 bucket storing your AWS CloudTrail data is 10 GB in size in the AWS console, you should allocate credits for 80 to 100 GB of data usage over the year in Trend Vision One.
  • Because the volume of log data for AWS VPC Flow Logs is not compressed in AWS, you can use the volume as a direct estimate of how many GB of data you need for AWS VPC Flow Logs in Trend Vision One.
To monitor your XDR for Cloud usage, go to Cloud Accounts → Credit Settings to view a graph of your past data usage from both log sources.