Reduce the Number of Entries in an Incident

Reduce the Number of Entries in an Incident

0
Created On 03/18/21 09:23 AM - Last Modified 07/19/22 23:17 PM


Symptom


You experience playbooks executing slowly and/or memory spikes.

Cause


Incidents with more than 1,000 entries can slow down playbooks and/or cause memory spikes.
  • Playbooks are looping on too much data
  • Too many indicators are being enriched

Resolution


  • Run playbook tasks in Quiet Mode. In Quiet Mode, inputs and outputs are not displayed but outputs are written to context.
  • Check playbooks for inefficient tasks.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001UpPCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail