By default, Application Control can process 100,000 observations in 24 hours. You can configure this setting to define the threshold value for your enterprise.
When the number of observations received at the ePO - SaaS server in the last 24 hours reaches the defined threshold, observation throttling is initiated.
On the ePO - SaaS console, select Menu → Configuration → Server Settings.
From the Setting Categories pane, select Solidcore.
Change the value of Threshold count at which to initiate throttling and suspend observation generation (6.1.1 and older endpoints) setting.