ATP supports running a maximum of ten dumps at a time. But you can cancel any dump that's in progress if you met that maximum. You must have Admin rights or Controller rights to cancel an endpoint data recorder dump.
ATP cancels any dump commands that do not return new results 3 days after they are initiated.
To cancel an endpoint data recorder dump
In ATP Manager on the Search > Endpoint tab in the Search Description column, click on the dump that you want to cancel.