Rate limit configuration in Microsoft Defender for Endpoint integration

Configure the rate limit of the API and timeout for the rate limit for Microsoft Defender for Endpoint integration.

Before you begin

Role required: sn_si.admin, sn_si.analyst (read-only)

Procedure

  1. In the navigation filter, enter sys.properties.list.
    The entire list of properties in the System Properties [sys_properties] table appears.
  2. Search and modify the following properties as per your requirements.
    Property NameDescription
    sn_sec_defender_ep.rate_limit_timeout_in_minutes If a request does not execute within the specified time frame, the execution gets halted and an appropriate error message is displayed.

    Default value: 75.
    sn_sec_defender_ep.request_per_hour_limit If the configured API call is made on the same Endpoint within one hour, the request gets queued until the threshold is reached or the configured timeout.

    Default value: 1500.
    sn_sec_defender_ep.request_per_minute_limit If the configured API call is made on the same Endpoint within one minute, the request gets queued until the threshold is reached or the configured timeout.

    Default value: 100.
    sn_sec_defender_ep.import_indicator_request_per_minute_limit If the configured API call is made on the endpoint within one minute, the request gets queued until the threshold is reached or the configured timeout.

    Default value: 30.