Skip to content

Commit 5c8214f

Browse files
Merge pull request #302304 from guywi-ms/update-service-limits
Update sentinel-service-limits.md
2 parents ca14b84 + 18036ad commit 5c8214f

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

articles/sentinel/sentinel-service-limits.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,17 @@ The following limits apply to incidents in Microsoft Sentinel.
6565

6666
However, a SOC that experiences the creation of more than *around* 3,000 new incidents per day will most likely find itself unable to keep up, and the database capacity will quickly be reached. In this situation, the SOC needs to find and fix any rules that create large numbers of incidents, to get the count of daily new incidents to manageable levels.
6767

68+
## Case management limits
69+
70+
The following limits apply to case management in Microsoft Sentinel.
71+
72+
| Description | Limit | Dependency |
73+
|--------------------|-----------------------------------------|------------|
74+
| Cases per tenant | 100,000 cases | None |
75+
| Attachments per tenant | 500 GB | None |
76+
| Linked incidents per case | 100 incidents | None |
77+
| Case retention period | 180 days | None |
78+
6879
## Machine learning-based limits
6980

7081
The following limits apply to machine learning-based features in Microsoft Sentinel like customizable anomalies and Fusion.

0 commit comments

Comments
 (0)