Cortex XDR high RAM usage

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Cortex XDR high RAM usage

L2 Linker

Hello everybody,

 

  We have a problem with RAM usage of our Cortex XDR agents. We have seen this issue about 7-8 endpoints for 2 moth. Ram usage of our endpoints increased up to 2 GB. it seems this is not agent version related problem. Because today we also saw this problem in one of our windows servers which RAM usage of xdr was 14 GB ( agent version 7.6 ). After restarting cortex xdr service everything back to normal.

 

  We are discussing with support but for now there is not any solution.

 

  Is there anybody who have same problem? Or you know what kind of situations can cause this problem?

 

  Thanks in advance.

1 REPLY 1

L3 Networker

Dear OrkanAlibayli,

 

Without checking directly from hosts, not easy to understand reasons. Best thing is to be in touch with Support and they can collect required log files from you and analyse them. 

 

2Gb memory usage is normal for windows, 2Gb is required minimum. But my advise would be if problem occurring specific servers like database, web servers etc, you can focus just that servers and please open case without restart XDR. High memory usage is not common problem and you may hit a bug and needs to be analysed. 

 

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-0/cortex-xdr-agent-admin/cortex-xdr-agent-for-...

  • 5360 Views
  • 1 replies
  • 1 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!