This morning we made a change to a few DLP rules to make sure they each send incident reports. These changes initiated a re-crawl of the environment for those rules … effectively spamming users with every sensitive data piece they have in OneDrive. Is this expected behavior? is there any way to prevent this from happening if the rules get changed in the future?
