Hey everyone, new to the CrowdStrike Intel side of things and hitting a weird snag. I've been trying to use the API to pull some threat intel reports for a project I'm working on. I generated my API keys in the Falcon platform (under Support > API Clients and Keys), and they seem active.
But when I check my usage in the UI, or even when I try to pull usage via the API itself, it consistently shows my quota used as zero. I've definitely made a few test calls—some succeeded, some got errors—but the counter never budges. I'm worried I'm being throttled or that my keys aren't configured right, even though the calls sometimes go through.
Could it be...
* A delay in the reporting system? If so, how long does it usually take to update?
* Something about the specific API endpoint I'm calling? I started with the `/intel/combined/reports/v1` endpoint.
* A permissions issue with the key scope? My key has the `intel:intel-reader` scope attached.
Just trying to understand if this is normal or if I've set something up incorrectly. I'm being cautious because I don't want to burn through a quota unexpectedly on a real query later. Has anyone else run into this? What should I check next?