EDR: Sensor Reports Diminished Health Score "Elevated Memory Usage" Though Actual Memory Usage is Not That Excessive.

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Why is EDR reporting elevated memory usage in a sensor's health status in the WebUI?

Environment

• EDR (Formerly CB Response) Windows Sensor: 6.2.1 and Below
• Microsoft Windows: All Supported Versions

Cause

Prior to the 6.2.2 sensor, EDR assigned a health score due to "elevated memory usage" once memory usage hits 50 MB.

Resolution

The memory used threshold has been increased to 512 MB in the Windows 6.2.2 sensor.

Additional Information

This issue is tracked under internal CB-24473