error Couldn't calc cores number [error 'open /proc/stat: too many open files']

jboyd98 — Thu, 03 Mar 2022 18:27:38 GMT

Recently had some performance problems reported from my xsoar users.

Found a tenant crashing. Upon investigating I found the following error in the logs:

App03 host:

error Couldn't calc cores number [error 'open /proc/stat: too many open files']error Couldn't calc cores number [error 'open /proc/stat: too many open files']

I set this on APP03 last night as a temporary band-aid until I could better understand:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-multi-tenant-guide/manage-content/sync-content-to-tenant-accounts/troubleshoot-errors-when-syncing-all-accounts.html

Review other host nodes that I didn't touch I see the following:

ulimit -a for root shows:

open files (-n) 1024

DockerHardeningCheck shows:

Additionally:

This key does NOT exist under Advanced /Troubleshooting:

Where is it pulling 1048576 from; where would this be set and whats the difference between that and my ulimit -a for root (there is no special config in /etc/security/limits.conf)

Any feedback is appreciated,

Boyd

Re: error Couldn't calc cores number [error 'open /proc/stat: too many open files']

amore — Mon, 14 Mar 2022 21:48:25 GMT

Hi @jboyd98 , is this still an issue for you? Please open a support case with logs and screenshots.

topic Re: error Couldn't calc cores number [error 'open /proc/stat: too many open files'] in Cortex XSOAR Discussions

error Couldn't calc cores number [error 'open /proc/stat: too many open files']

Re: error Couldn't calc cores number [error 'open /proc/stat: too many open files']