Configure the memory limitation by adding a server configuration in Cortex XSOAR.
It is recommended limiting available memory for each container to 1 GB.
On CentOS 7.x distributions with Docker CE or EE with version 17.06 and later, ensure that your kernel fully supports kmem accounting or that it has been compiled to disable kmem accounting. The kmem accounting feature in Red Hat’s Linux kernel has been reported to contain bugs, which cause kernel deadlock or slow kernel memory leaks. This is caused by a patch introduced in runc, which turns on kmem accounting automatically when user memory limitation is configured, even if not requested by the Docker CLI setting
--kernel-memory (see: opencontainers/runc#1350). Users using Red Hat's distribution of Docker based on version 1.13.1 are not affected as this distribution of Docker does not include the runc patch. For more information see Red Hat’s Docker distribution documentation.
If you do not want to apply Docker memory limitations, due to the note above, you should explicitly set the advanced parameter:
swap limit capabilities is enabled, in Cortex XSOAR configure the memory limitation using the following advanced parameters.
Add the following keys.
"limit.docker.memory": true, "docker.memory.limit": "1g"
Save the changes.
Restart the demisto service on the engine machine.
sudo systemctl start d1
sudo service d1 restart