- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
03-03-2022 10:27 AM
Recently had some performance problems reported from my xsoar users.
Found a tenant crashing. Upon investigating I found the following error in the logs:
App03 host:
error Couldn't calc cores number [error 'open /proc/stat: too many open files']error Couldn't calc cores number [error 'open /proc/stat: too many open files']
I set this on APP03 last night as a temporary band-aid until I could better understand:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-multi-tenant-guide/manage-con...
Review other host nodes that I didn't touch I see the following:
ulimit -a for root shows:
open files (-n) 1024
DockerHardeningCheck shows:
Additionally:
This key does NOT exist under Advanced /Troubleshooting:
Where is it pulling 1048576 from; where would this be set and whats the difference between that and my ulimit -a for root (there is no special config in /etc/security/limits.conf)
Any feedback is appreciated,
Boyd
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!