Feature Limits

Function	Tested Limit	Comments
Bultin Access report to report on users with access to a specific SMB share (release 2.5.8.1 or later)	100 000 (any combination of users and AD groups)	An AD with 40000 users and SMB share level permissions were tested to this size of AD, Larger AD may work fine without issues. This is a tested limit with no results for AD beyond this size.
Concurrent quick searches	10
Concurrent reports	1	any other report jobs will be queued until a report slot is available to run on the ECA cluster
Enterprise Compliance Mode Clusters	Supported	Requires compadmin user to add cluster to Eyeglass
Concurrent active wiretap monitoring sessions	2	Rate limits are applied on the event rate displayed in the UI
Defined Wiretap configurations (user or path)	2	Rate limits are applied on the event rate displayed in the UI
Active Audit - Mass Delete policies	2	Resources may need to increase to support policies. RAM increase and GHZ
Active Audit - DLP policies	2	Resources may need to increase to support policies. RAM increase and GHZ
Custom Active Audit triggers	25	Tested limit of concurrent triggers
Number of records returned from a query	1,000,000
Longest Running single Search job	20 hours	Timeout for jobs consuming search resources are capped at 20 hours. This is to avoid a long running search consuming too many resources. An advanced configuration to enable concurrent searches is possible. See guide here on the process to enable concurrent searches.