topic Re: High Memory Utilization for Check Point Endpoint Forensic Recorder & Harmony Agent Threat E in Endpoint

High Memory Utilization for Check Point Endpoint Forensic Recorder & Harmony Agent Threat Emulation

aqeel — Wed, 11 Sep 2024 06:21:21 GMT

Dear Community Members

I see memory utilization high for below Harmony Services:

1. Check Point Endpoint Forensic Recorder

2. Harmony Agent Threat Emulation

See below screenshot and help me find the reason for it if it's normal, if it it is not then I need guidance to fix it.

Thank you

Aqeel

Re: High Memory Utilization for Check Point Endpoint Forensic Recorder & Harmony Agent Threat E

G_W_Albrecht — Wed, 11 Sep 2024 08:04:29 GMT

I see no issue here - 0,5% and 0% CPU are very good, as that is the usual indicator for problems.

Re: High Memory Utilization for Check Point Endpoint Forensic Recorder & Harmony Agent Threat E

aqeel — Wed, 11 Sep 2024 08:13:51 GMT

Thanks but my question was about memory utilization not CPU. CPU is fine but what is the reason for high memory utilization for the two services highlighted in the image. ?

Re: High Memory Utilization for Check Point Endpoint Forensic Recorder & Harmony Agent Threat E

G_W_Albrecht — Wed, 11 Sep 2024 08:56:24 GMT

I can read and have answered your question - i told you that i see no issues here, EFRService sometimes also uses 300MB RAM and all is well. You will not run out of memory, i am sure !

Re: High Memory Utilization for Check Point Endpoint Forensic Recorder & Harmony Agent Threat E

aqeel — Wed, 11 Sep 2024 09:12:02 GMT

@G_W_Albrecht wrote:
I can read and have answered your question - i told you that i see no issues here, EFRService sometimes also uses 300MB RAM and all is well. You will not run out of memory, i am sure !

Thanks @G_W_Albrecht , may I know the reason for difference in memory utilization for this service as compared to other endpoint services?

Re: High Memory Utilization for Check Point Endpoint Forensic Recorder & Harmony Agent Threat E

G_W_Albrecht — Wed, 11 Sep 2024 09:16:10 GMT

Yes, you may know - to achieve that, please open a SR# with TAC and ask CP ! I can only give you a statement out of my 15y experience with this product and how EPS uses memory when working as expected, sorry if that is not enough for you...