If you configure a health rule to evaluate a large number of entities (approximately one million or more), the health rule is automatically disabled to prevent any performance issues with the Controller. The logs of the disabled health rule are stored in the Controller and you can view the logs by using Splunk.