The Security Analytics team has recently introduced a new license entitlement called SA-10T-SUB.
This license allows for 10TB of capture per day. This is per account and not per capture device. The 10TB per day is averaged over 10 days. If you exceed the 10TB/day, then you will see a pink warning banner when you log in. The system will continue to capture normally even if the limit has been reached.