Fix butch size for event search in the Indicator Match rule. (#138356) (

#138404)

* Make event list count for 3000

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
(cherry picked from commit 42b7987)

Co-authored-by: Khristinin Nikita <nikita.khristinin@elastic.co>

x-pack/plugins/security_solution/server/lib/detection_engine/signals/threat_mapping/get_event_count.ts

@@ -11,7 +11,7 @@ import { getQueryFilter } from '../../../../../common/detection_engine/get_query
 import { singleSearchAfter } from '../single_search_after';
 import { buildEventsSearchQuery } from '../build_events_query';
 
-export const MAX_PER_PAGE = 9000;
+export const MAX_PER_PAGE = 3000;
 
 export const getEventList = async ({
   services,
@@ -47,7 +47,7 @@ export const getEventList = async ({
     services,
     ruleExecutionLogger,
     filter,
-    pageSize: Math.ceil(Math.min(tuple.maxSignals, calculatedPerPage)),
+    pageSize: calculatedPerPage,
     primaryTimestamp,
     secondaryTimestamp,
     sortOrder: 'desc',