diff --git a/cyences_app_for_splunk/default/macros.conf b/cyences_app_for_splunk/default/macros.conf
index ad3858d4..899c230f 100644
--- a/cyences_app_for_splunk/default/macros.conf
+++ b/cyences_app_for_splunk/default/macros.conf
@@ -387,7 +387,7 @@ definition = 0.5
 definition = 0.5
 
 [cs_network_outbound_min_MB_traffic]
-definition = 0
+definition = 10
 
 # O365
 [cs_o365_authorizationpolicy_change_internal_filter]