For most enterprises, the default settings for the throttling feature are enough. But, if needed, you can change the default configuration for the feature.
On the ePO - SaaS console, select Menu → Policy → Policy Catalog.
Select Solidcore 9.x.x: General for the product.
In the Configuration (Client) category, click Duplicate for the Trellix Default policy.
Specify the policy name, then click OK.
Open the policy and click the Throttling tab.
Edit the values for events, inventory updates, and policy discovery requests, as needed.
Value
Description
Events
The value for threshold and cache size is defined in number of event XML files. By default, 2000 XML files can be processed per endpoint in 24 hours. Also, the default event cache size is set to 7000 XML files per endpoint.
Inventory Updates
The value for threshold is defined in number of file elements containing inventory updates. By default, 15000 files elements can be processed per endpoint in 24 hours.
Policy Discovery (Observations)
The value for threshold and cache size is defined in number of request XML files. By default, 100 XML files can be processed per endpoint in 24 hours. Also, the default event cache size is set to 700 XML files per endpoint.
Save the policy and apply it to the relevant endpoints.