Press CTRL+K to open search

Investigation rate limits

  • Published on Sep 3, 2026
  • 1 minute(s) read
Prev Next

has defined investigation rate limits for creating investigations and adding evidence to investigations.

Action

Maximum rate limit

Create new investigations

10 new investigations in the duration of 1 hour.

20 new investigations in the duration of 1 day.

Add new evidence to single investigation or multiple investigations

10 evidences in the duration of 1 hour.

Related articles
  • Investigation rate limits
    Endpoint Detection and Response with Forensics (EDRF) > Investigate potential threats with EDRF > Investigating threats > Create an investigation for an in-depth analysis of a threat
  • Incident limits
    Data Loss Prevention (DLP) > Data Loss Prevention SaaS > Trellix Data Loss Prevention - SaaS Product Guide - February 2026 > Using the Protection Workspace to manage incidents > Managing incidents within Protection Workspace
  • Get Investigations by ID
    Endpoint Detection and Response (EDR) > Endpoint Detection and Response Product Guide > Trellix EDR APIs > API sample for investigation