What is the size limit of rawContent of watchlist when bundled in solution package?

Nirali Shah 146 Reputation points
2025-01-31T06:30:59.1833333+00:00

We are using watchlists to upload data via csv files and using it in worksbook. As per the document, there is a size limit of 3.8MB while creating watchlist using local csv files. So, we have created csv files of size 2.5MB, using which we are able to created watchlist through azure portal.

But, when we are creating watchlists json template by adding those data in rawContent and creating mainTemplate for solution package, we are getting error at time of deployment as seen in attached screeshots. Earlier we have used this approach but we had only 20-30 records at that time there was no issue kind of this.

So is there any other size limitations while deploying watchlists through mainTemplate which contains watchlist json file with rawContent?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,210 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Clive Watson 7,006 Reputation points MVP
    2025-02-03T16:17:12.1433333+00:00

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.