EDR: Sensor Reports Diminished Health Score "Elevated Memory Usage" Though Actual Memory Usage is Not That Excessive.
book
Article ID: 288176
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Why is EDR reporting elevated memory usage in a sensor's health status in the WebUI?
Environment
- EDR (Formerly CB Response) Windows Sensor: 6.2.1 and Below
- Microsoft Windows: All Supported Versions
Cause
Prior to the 6.2.2 sensor, EDR assigned a health score due to "elevated memory usage" once memory usage hits 50 MB.
Resolution
The memory used threshold has been increased to 512 MB in the Windows 6.2.2 sensor.
Additional Information
This issue is tracked under internal CB-24473
Feedback
thumb_up
Yes
thumb_down
No