Frequently reviewing and managing requests for the generated events allows you to define the relevant rules for your setup. If you don't process events in a timely manner, you continue to get similar and repeated events from endpoints.
Event throttling helps you take care of the non-responsiveness of the ePO - On-prem interface. When the number of events received at the ePO - On-prem server reaches the defined threshold, event throttling is initiated. When event throttling starts, Application Control perform these actions:
It stops further processing of events at ePO - On-prem to prevent non-responsiveness of the ePO - On-prem interface.
It applies the Throttling Rules policy to the My Organization group to prevent the generation of events on all endpoints after the agent-server communication interval.
It generates the Event Request Threshold Exceeded event. This event is displayed on the Threat Event Log page and can be used to create an automatic response.