Merge pull request #296469 from austinmccollum/patch-3

clarify watchlist service limits sentinel-service-limits.md

Author: prmerger-automator[bot]

articles/sentinel/sentinel-service-limits.md

@@ -141,12 +141,12 @@ The following limits apply to watchlists in Microsoft Sentinel. The limits are r
 
 |Description                   | Limit        |Dependency|
 |--|-------------------------|--------------------|
-|Upload size for local file| 3.8 MB per file |Azure Resource Manager
+|Upload size limit for local file| 3.8 MB per file (Watchlists larger than 3.8 MB are considered large) |Azure Resource Manager
 |Line entry in the CSV file |10,240 characters per line|Azure Resource Manager|
 |Total size of a single row | 10 Kb | Log Analytics|
-|Upload size for files in Azure Storage |500 MB per file|Azure Storage|
+|Upload size for large watchlist files in Azure Storage |500 MB per file|Azure Storage|
 |Total number of active watchlist items per workspace. When the max count is reached, delete some existing items to add a new watchlist.|10 million active watchlist items|Log Analytics|
-|Total rate of change of all watchlist items per workspace|1% rate of change per month|Log Analytics|
+|Total rate of change of all watchlist items per workspace (create, update, and delete operations) | 100,000 (1% of max watchlist items) changes per month|Log Analytics|
 |Number of large watchlist uploads per workspace at a time|One large watchlist|Azure Cosmos DB|
 |Number of large watchlist deletions per workspace at a time|One large watchlist|Azure Cosmos DB|