This section describes limitations that are imposed on the Kaspersky CyberTrace functionality by license keys of different licensing levels.
Limit on events per second (EPS)
For the Community Edition licensing level, Kaspersky CyberTrace processes no more events per second than permitted by the licensing level.
Several commercial licensing levels have EPS limits specified in the licensing key. Kaspersky CyberTrace limits EPS for these licensing levels in two stages.
At the first stage, if the EPS limit is exceeded at any point in time, Kaspersky CyberTrace displays a notification in Kaspersky CyberTrace Web and generates a KL_ALERT_EPSLimitExceeded alert. All events above the EPS limit continue to be processed.
At the second stage, if the average system EPS over an hour exceeds the system EPS limit more than 30% of time for a period of seven days, the limit takes effect. Kaspersky CyberTrace displays a notification in Kaspersky CyberTrace Web and generates a KL_ALERT_EPSHardLimit alert. Kaspersky CyberTrace starts to process events only within the limit imposed by the license key. After you change the license key or start to process no more events than are specified in the licensing key, this limitation ceases to apply.
Limit on the number of indicators
This limitation is only applicable to the Community Edition licensing level.
The licensing level sets a limit on the total number of indicators, Kaspersky CyberTrace reads, in total, no more records from all the feeds than are permitted by the license key or licensing level.
If the number of indicators exceeds a limit, Kaspersky CyberTrace sends a KL_ALERT_IndicatorsStoreHardLimit event and then displays a notification in Kaspersky CyberTrace Web that there is a limitation on the adding and updating of indicators. When a KL_ALERT_IndicatorsStoreHardLimit event is generated, Kaspersky CyberTrace stops reading new records.
After you change the license key or start to process no more indicators than are specified in the licensing key, this limitation ceases to apply.
Limit on the use of custom feeds
If the license key does not allow the use of custom feeds, only Kaspersky Threat Data Feeds can be used. OSINT feeds cannot be used in this case.
Other limitations
Availability of the following features depends on the license key or licensing level:
If multi-user mode is available, you can create and manage users.
Otherwise, you can sign in under the admin account only. This user account has the Administrator role.
If multitenancy mode is enabled, you can create and manage tenants.
Otherwise, you can use only the default tenant.