topic Re: Is it possible to limit CPU and memory consumption of the Cortex agent? in Cortex XDR Discussions

Is it possible to limit CPU and memory consumption of the Cortex agent?

C.Hoffmann — Wed, 20 Mar 2024 12:17:50 GMT

Hello everybody.
If you have any doubts about the community's help story, my Cortex agent is installed on my Windows servers but often consumes a lot of CPU and memory resources from my VMs, this ends up creating many alerts in my monitoring, I would like to understand if it is possible to create some rule or adjustment that would limit the use of cpu and memory by the agent or some control at this level.
I checked the documentation and even the forum but I didn't find a conclusive answer to my question.

Re: Is it possible to limit CPU and memory consumption of the Cortex agent?

aspatil — Fri, 22 Mar 2024 05:10:57 GMT

Hello @C.Hoffmann ,

Thanks for reaching out on LiveCommunity!

We can do it with the help of Support Exception. However, you need to explain and validate with data points why the CPU/resource consumption is abnormally high (task manager screenshot will not suffice)c

You can open a TAC case for the same.

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

Re: Is it possible to limit CPU and memory consumption of the Cortex agent?

E.Jafarov — Sat, 23 Nov 2024 10:53:50 GMT

Hi C.Hoffmann,

You can disable even collector to reduce CPU usage:

"cytool event_collection disable"

If it does not solve this problem. You should create technical ticket from CSP. Support team will create YARA rules to map exception profiles.