System Health status displays one of the following messages:
All versions of EDR and ATP
Most common causes are:
2. Ensure system resources are RESERVED and not just allocated
3. Check sizing requirements of Hardware and VM especially when Endpoint Activity Recorder (EAR) has been enabled:
Operating EDR VMs with UNRESERVED resources may corrupt the database; and may cause the EDR to repeatedly crash or not to boot properly. Hence, the EDR must be redeployed.
Also, EDR VM snapshots are not supported and may result in similar behaviors.