This disclosure involves applying rate limits to violating tenant computing devices causing resource consumption violations at system components identified via violation evaluation processes. A system identifies a resource consumption violation with respect to a computing system hosting an online service. The system retrieves log data identifying tenant systems that accessed the memory resource during a particular time period in which the resource consumption violation impacted performance of the online service. The system determines, from the log data, that a violator tenant system accessing the online service caused the resource consumption violation. The system enforces a rate limit against the violator tenant system rather than other tenant systems identified in the log data.