Rate limit configuration in Microsoft Defender for Endpoint integration
Configure the rate limit of the API and timeout for the rate limit for Microsoft Defender for Endpoint integration.
Before you begin
Role required: sn_si.admin, sn_si.analyst (read-only)
Procedure
In the navigation filter, enter
sys.properties.list.The entire list of properties in the System Properties [sys_properties] table appears.
Search and modify the following properties as per your requirements.
| Property Name | Description |
|---|---|
| sn\_sec\_defender\_ep.rate\_limit\_timeout\_in\_minutes | If a request does not execute within the specified time frame, the execution gets halted and an appropriate error message is displayed.Default value: 75. |
| sn\_sec\_defender\_ep.request\_per\_hour\_limit | If the configured API call is made on the same Endpoint within one hour, the request gets queued until the threshold is reached or the configured timeout.Default value: 1500. |
| sn\_sec\_defender\_ep.request\_per\_minute\_limit | If the configured API call is made on the same Endpoint within one minute, the request gets queued until the threshold is reached or the configured timeout.Default value: 100. |
| sn\_sec\_defender\_ep.import\_indicator\_request\_per\_minute\_limit | If the configured API call is made on the endpoint within one minute, the request gets queued until the threshold is reached or the configured timeout.Default value: 30. |