Eventid 92 Quota is exeeded

Brass Contributor

Hi,

after having to rejoin some Servers which had communication issues i got these Events

First Eventid 92 up to 24h later 93.

In that time AV reported Eicar-Alerts but Timeline was not working. It started after Eventid93.

 

Eventlog: Sense

Eventi:d:93

Resuming sending sensor cyber data. State Mask: 0x80064

Eventi:d:92

Stopping sending sensor cyber data quota because data quota is exceed. Will resume sending once quota period passes. State Mask: 0x48064

Info

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/event-error-codes?view=o36...

 

There is no documentation of quota limits and no info when the restrictions will be released or how this can happen.

Ideas? Tips? Insights?

 

0 Replies