Rate limits
Per-plan rates on the ingest and data planes, and fixed limits on the routes that take a password.
| Plane | Free | Pro |
|---|---|---|
| Ingest, per tenant | 20 req/s, burst 40 | 200 req/s, burst 400 |
| Data and account, per tenant | 10 req/s, burst 20 | 100 req/s, burst 200 |
Enterprise limits are set per tenant. Over a limit the response is 429 with Retry-After in whole seconds.
Unauthenticated routes
Sign-up and login are limited per submitted email: a burst of five attempts, refilling at one per minute, so a drained burst is back in about five minutes. Account deletion and password-reset requests are limited the same way.
Sizes
| Thing | Limit |
|---|---|
Ingest message | 64 KiB |
Ingest keys | 128 entries |
Ingest tags | 64 entries |
Rule template_contains | 500 characters |
| Escalation levels per rule | 10 |
Action body | 8 KiB |
Action headers | 32 |
Report description | 4096 characters |
Log tail limit | 200 |
Retention defaults on a self-hosted daemon
| Flag | Default |
|---|---|
-retain-days | 7 |
-max-logs-per-source | 10,000 |
-resolved-horizon-days | 30 |