SecurityInsight settings · Settings > Collection scope & limits
Identity exposure graph split size
| Key | SI_EgIdentityBucketThreshold |
|---|---|
| Where | Settings > Collection scope & limits |
| Type | int |
| Default | 30000 identities. |
| Edition | Community |
What it does
Above this many identities of one kind, the identity engine reads the exposure graph in several smaller queries instead of one.
When set
A lower value splits reads sooner: more queries, but each stays within response limits. A higher value risks a single oversized query failing in very large tenants.
When blank or default
Left blank, the default applies: 30000 identities.
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only if exposure graph reads for identities fail or time out.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack