Carbon Black Cloud: High Memory Usage with Linux Sensor 2.13.0

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

High memory utilization while running sensor version 2.13.0.

Environment

• Carbon Black Cloud Sensor: 2.13.0
• Linux: All Supported Versions

Cause

This is caused by a situation where the endpoint experiences a high event rate and as a result the 2.13.0 sensor consumes additional memory.

Resolution

This was addressed on CBC-11966, and was remedied in version 2.13.1 of the CBC sensor.