All Apps and Add-ons

When we are running SA-SPLICE using mongodb, the disk usage(RAM) and current load(core) is utilized more than 90%.

512anagha
New Member

We installed SA-SPLICE application (and mongodb ) on our Splunk enterprise. We have configured threat intelligence using URL "http://hailataxii.com". The diskand current load utilization is shooting to more than 90% whenever the IOCs are enabled.

Can someone please help us identify the as what the issue is and due which of the elements (mongodb, SA-SPLICE or hailataxii.com)
Also, if anyone else is facing the same issue kindly comment

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...