You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
## User and Entity Behavior Analytics (UEBA) limits
@@ -137,16 +137,16 @@ The following limit applies to UEBA in Microsoft Sentinel. The limit for UEBA in
137
137
138
138
## Watchlist limits
139
139
140
-
The following limits apply to watchlists in Microsoft Sentinel. The limits are related to the dependencies on other services used by watchlists.
140
+
The following limits apply to watchlists in Microsoft Sentinel. Watchlists larger than 3.8 MB are considered large. The limits are related to the dependencies on other services used by watchlists.
|Upload size limit for local file| 3.8 MB per file (Watchlists larger than 3.8 MB are considered large) |Azure Resource Manager
144
+
|Upload size limit for local file| 3.8 MB per file |Azure Resource Manager
145
145
|Line entry in the CSV file |10,240 characters per line|Azure Resource Manager|
146
146
|Total size of a single row | 10 Kb | Log Analytics|
147
147
|Upload size for large watchlist files in Azure Storage |500 MB per file|Azure Storage|
148
-
|Total number of active watchlist items per workspace. When the max count is reached, delete some existing items to add a new watchlist.|10 million active watchlist items|Log Analytics|
149
-
|Total rate of change of all watchlist items per workspace(create, update, and delete operations) | 100,000 (1% of max watchlist items) changes per month|Log Analytics|
148
+
|Total number of active watchlist items per workspace</br>When the max count is reached, delete some existing items to add a new watchlist.|10 million active watchlist items|Log Analytics|
149
+
|Total rate of change of all watchlist items per workspace</br>(create, update, and delete operations) | 100,000 changes per month</br>(1% of max active watchlist items)|Log Analytics|
150
150
|Number of large watchlist uploads per workspace at a time|One large watchlist|Azure Cosmos DB|
151
151
|Number of large watchlist deletions per workspace at a time|One large watchlist|Azure Cosmos DB|
0 commit comments