Reduce the Size of Enrichment Data

Reduce the Size of Enrichment Data

12436
Created On 03/18/21 09:40 AM - Last Modified 12/15/22 11:12 AM


Symptom


Your system is experiencing memory issues (OOM).

Cause


The memory issues might be caused by enrichment data larger than 1 MB, which might be caused by the following:
  • An integration returns a large amount of data for a single indicator.
  • A large number of indicators is being enriched.

Resolution


  • Modify playbook tasks to limit indicator extraction and enrichment.
  • Modify integration settings to limit the data returned by indicator enrichment.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001UpUCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language