Test the Memory Limit - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Administrator Guide

Product
Cortex XSIAM
Creation date
2024-02-26
Last date published
2024-04-18
Category
Administrator Guide
Abstract

Test the Docker memory limit by running a script in the Playground.

After configuring the memory limitation to the recommended 1 GB, you can test the memory limit in the playground.

  1. Go toIncident ResponseAutomation Scripts and create a New Script.

  2. In the Script Name field, type Test Memory.

  3. Add the following script:

    from multiprocessing import Process
    import os
    
    
    def big_string(size):
        sys.stdin = os.fdopen(0, "r")
        s = 'a' * 1024
        while len(s) < size:
            s = s * 2
        print('completed creating string of length: {}'.format(len(s)))
    
    
    size = 1 * 1024 * 1024 * 1024
    p = Process(target=big_string, args=(size, ))
    p.start()
    p.join()
    if p.exitcode != 0:
        return_error("Return code from sub process indicates failure: {}".format(p.exitcode))
    else:
        print("Success allocating memory of size: {}".format(size))
  4. From the SCRIPT SETTINGS dialog box, in the BASIC section, select the script to run on the Single engine and select the engine where you want to run the script.

  5. Save the script.

  6. To test the memory limit, type !TestMemory.

    The command returns an error when it fails to allocate 1 GB of memory.