Skip to content

Commit ea287a3

Browse files
Merge pull request #249359 from austinmccollum/austinmc-wmlimits
update workspace manager limits
2 parents 58ef54f + 0f01bf8 commit ea287a3

File tree

4 files changed

+28
-41
lines changed

4 files changed

+28
-41
lines changed

articles/azure-resource-manager/management/azure-subscription-service-limits.md

Lines changed: 1 addition & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -443,47 +443,7 @@ The latest values for Microsoft Purview quotas can be found in the [Microsoft Pu
443443

444444
## Microsoft Sentinel limits
445445

446-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-analytics-rules.md)]
447-
448-
### Incident limits
449-
450-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-incidents.md)]
451-
452-
### Machine learning-based limits
453-
454-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-machine-learning.md)]
455-
456-
### Multi workspace limits
457-
458-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-multi-workspace.md)]
459-
460-
### Notebook limits
461-
462-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-notebooks.md)]
463-
464-
### Repositories limits
465-
466-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-repositories.md)]
467-
468-
### Threat intelligence limits
469-
470-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-threat-intelligence.md)]
471-
472-
## TI upload indicators API limits
473-
474-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-ti-upload-api.md)]
475-
476-
### User and Entity Behavior Analytics (UEBA) limits
477-
478-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-ueba.md)]
479-
480-
### Watchlist limits
481-
482-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-watchlists.md)]
483-
484-
### Workbook limits
485-
486-
[!INCLUDE [sentinel-service-limits](../../sentinel/includes/sentinel-limits-workbooks.md)]
446+
For Microsoft Sentinel limits, see [Service limits for Microsoft Sentinel](../../sentinel/sentinel-service-limits.md)
487447

488448
## Service Bus limits
489449

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
title: "include file"
3+
description: "include file"
4+
services: microsoft-sentinel
5+
author: austinmccollum
6+
tags: azure-service-management
7+
ms.topic: "include"
8+
ms.date: 05/23/2023
9+
ms.author: austinmc
10+
ms.custom: "include file"
11+
---
12+
13+
The following limits apply to workspace manager in Microsoft Sentinel.
14+
15+
|Description | Limit |Dependency|
16+
|--|-------------------------|--------------------|
17+
|Number of published operations in a group<br>*Published operations* = (*member workspaces*) * (*content items*)| 2000 published operations |None|
18+

articles/sentinel/sentinel-service-limits.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,10 @@ This article lists the most common service limits you might encounter as you use
5656

5757
[!INCLUDE [sentinel-service-limits](includes/sentinel-limits-workbooks.md)]
5858

59+
## Workspace manager limits
60+
61+
[!INCLUDE [sentinel-service-limits](includes/sentinel-limits-workspace-manager.md)]
62+
5963
## Next steps
6064

6165
- [Azure subscription and service limits, quotas, and constraints](../azure-resource-manager/management/azure-subscription-service-limits.md)

articles/sentinel/workspace-manager.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -81,6 +81,10 @@ Workspace manager groups allow you to organize workspaces together based on busi
8181
## Publish the Group definition
8282
At this point, the content items selected haven't been published to the member workspace(s) yet.
8383

84+
> [!NOTE]
85+
> The publish action will fail if the [maximum publish operations](#known-limitations) are exceeded.
86+
> Consider splitting up member workspaces into additional groups if you approach this limit.
87+
8488
1. Select the group > **Publish content**.
8589

8690
:::image type="content" source="media/workspace-manager/publish-group.png" alt-text="Screenshot shows the group publish window.":::
@@ -111,6 +115,7 @@ Common reasons for failure include:
111115
- A member workspace has been deleted.
112116

113117
### Known limitations
118+
- The maximum published operations per group is 2000. *Published operations* = (*member workspaces*) * (*content items*).<br>For example, if you have 10 member workspaces in a group and you publish 20 content items in that group,<br>*published operations* = *10* * *20* = *200*.
114119
- Playbooks attributed or attached to analytics and automation rules aren't currently supported.
115120
- Workbooks stored in bring-your-own-storage aren't currently supported.
116121
- Workspace manager only manages content items published from the central workspace. It doesn't manage content created locally from member workspace(s).

0 commit comments

Comments
 (0)