diff --git a/docs/cse/rules/rules-status.md b/docs/cse/rules/rules-status.md index 73407d6a88..6fb78ef8d6 100644 --- a/docs/cse/rules/rules-status.md +++ b/docs/cse/rules/rules-status.md @@ -75,12 +75,6 @@ Sometimes there may be a problem creating a baseline for a [first seen rule](/do Limits are set on how often a rule fires so that the system is not overloaded. For example, if a rule fires too many signals in an hour, it can cause performance problems for all rule processes. If a rule exceeds a limit, its rule status changes from Active to Failed and the rule is disabled. -| Type | Limit | -| :-- | :-- | -| Signals per hour | 100K | -| Signals per 24 hours | 1M | - - - ## Query for rule status changes You can query audit logs for rule status changes. For more information about querying audit logs, see [Cloud SIEM Audit Logging](/docs/cse/administration/cse-audit-logging/) and [Cloud SIEM audit log definitions](/docs/manage/security/audit-indexes/documentation-audit-log-definitions/#cloud-siem-audit-log-definitions).