High resource consumption

[MSOjeda]

We have enabled cortx xdr in report mode and there is a constant high consumption of resources (CPU and Load Average) which causes problems in the machines. Does anyone know what feature usually consumes a lot of resources when enabled and causes the problem?

[afurze]

Hi MSOjeda,

Without more concrete information on what consumption you are seeing it's difficult to tell.  We don't break down consumption by feature, that's very difficult to do, and components running on the agent cannot be disabled by XDR administrators.  Disabling the protection modules in your profiles only stops alerts and prevention actions, the components are still running within the agent.

[anlynch]

Hi @MSOjeda,

If this issue is persisting I definitely think you should submit a ticket through Support.  Our engineers will be able to get a support file from you and look through the logs of your agents to give you a better understanding of what's going on and how to fix it.

Have a great day!