Modify the default configuration properties to limit the number of security incidents that can be created during a 24 hour period or the number of alerts that can be aggregated in one security incident.

To modify the system properties, log in as a user with the sn_si.admin role and navigate to Microsoft Graph Security API Integration > Microsoft Graph Security API Integration Settings.

The default configuration settings are displayed. You can modify these settings if required.

Any modified integration settings will be applied during the next polling interval as defined in the profile.