Help CenterImportant: Requires Windows Agent 10.12.2 or greater.
The Detect Notification Send Limit Advanced Setting allows administrators to control how Detect Notification Actions are sent to external integrations, such as REST API endpoints or webhooks.
When batching is enabled, notification actions are grouped together and sent either every 10 seconds or once the configured batch size is reached, whichever happens first. This helps reduce the number of outbound requests sent to external systems while still ensuring Detect notifications are delivered in a timely manner.
Administrators can configure the maximum batch size, from 1 to 50,000 actions, based on the needs and capacity of their receiving system.
This setting can be applied across the entire organization and ordered within the policy hierarchy, allowing administrators to control how notification batching is applied.
Navigate to the 'Advanced Settings' page and select the '+ New Setting' button in the top left corner of the page.
In the 'Create Settings' side panel, select the 'Setting Type' dropdown, then select 'Detect Notification Send Limit' from the list of Advanced Settings.
Select where this setting should apply.
In the 'Parameters' section, to enable this setting, toggle on the toggle under 'Enable batching for Detect Notification Actions'.
Input a number from 1 to 50,000 to set the number of Detect notification actions that will be batched together before being sent.
Important: Notifications will be sent once the maximum batch size is reached OR every 10 seconds, whichever happens first.
Select the 'Create' button to save the setting.
On the main grid, select the 'Update Agents' button to update the agents with the latest settings.
