Cortex XSOAR: Too many incoming incidents

Cortex XSOAR: Too many incoming incidents

1590
Created On 03/01/22 04:05 AM - Last Modified 08/02/23 10:45 AM


Symptom


  • Slow system performance.
  • Alert  "% of recommended incoming incidents used" displayed in the System Diagnostics page (GUI: Settings > About > System Diagnostics)

Environment


  • Cortex XSOAR Hosted Service
  • Version 6.6 

Cause


Number of incidents ingested per day is near or exceeds the hosted service limit .

Resolution


Set up pre processing rules to eliminate duplicate incidents that do not require investigation.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004NNWCA2&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail