Limits in Data Security Investigations

This article describes the limits in Microsoft Purview Data Security Investigations.

Investigation limits

The following table lists the limits for investigations in Data Security Investigations.

Description of limit Data Security Investigations feature support
Total number of documents that you can add to an investigation. 40 million
Total file size per investigation. 1 TB

Purge limits

The following table lists the limits for purge in Data Security Investigations.

Description of limit Data Security Investigations feature support
Maximum number of items per purge search query. 1,000

Audit search limits (preview)

The following table lists the limits for audit search in Data Security Investigations.

Description of limit Data Security Investigations feature support
Maximum items returned per audit search. Approximately 3,000
Maximum concurrent audit searches per user. 10

Tip

If your investigation involves more than approximately 3,000 audit items, you can split the data into smaller time-based slices. For more information, see Work with large audit search results.