Rate limit on audit events API

You can configure the per minute rate limit per user for requests to the instance audit events API. The default is 200.

Requests over the rate limit are logged into the auth.log file.

The limit applies to both GET /audit_events and GET /audit_events/:id. For example, if you set a limit of 200, requests to these endpoints that exceed a rate of 200 within one minute are blocked. Access is restored after one minute.

Change the rate limit

Prerequisites:

• Administrator access.

To change the rate limit:

1. In the upper-right corner, select Admin.
2. In the left sidebar, select Settings > Network.
3. Expand Audit events API rate limits.
4. Change the value of the rate limit. The rate limit is per minute per user. To disable the rate limit, set the value to 0.
5. Select Save changes.