View system status in the System Diagnostics page
View System Diagnostics errors in Cortex XSOAR 8.10 On-prem.
The Cortex XSOAR System Diagnostics page enables you to identify and fix potential issues before they become system-critical. By default, the System Diagnostics page shows trends from the last 24 hours, but you can also select the last hour, 6 hours, 12 hours, 3 days, or 7 days.
Download log bundles
To help with debugging issues, you can download the log bundle by clicking 
in the upper right hand corner. The log bundle contains information about the system from the current state up to the past ten days, and it should be included when opening a support ticket.
Important
When you click to download the log bundle, 
indicates the download is in process (without any other messages). The log bundle download may take a few minutes. Do not refresh or leave the page until the log bundle file download completes.
View system status
The System Diagnostics page provides system status data over time in the form of graph and table widgets.
Tip
If there is a node failure, manage the nodes from the textual UI. For example, if a node fails, remove it and then add a new node to replace it. For more information, see Manage nodes in a cluster.
The following widgets present node status information.
Nodes - CPU
Trend graph showing CPU consumption. The trend graph shows an increase as system usage increases. Temporary peaks might correlate with system delays or slowness.
We recommend increasing CPU resources when you reach system limits.
Nodes - Memory
Trend graph showing memory consumption. The trend graph shows an increase as memory usage increases. Temporary peaks might correlate with system delays or slowness.
We recommend increasing memory resources when you reach system limits.
Nodes - Storage
Trend graph showing storage usage. The trend graph shows an increase as storage usage increases. Temporary peaks might correlate with system delays or slowness.
We recommend increasing storage resources when you reach system limits.
Active Nodes Snapshot
Shows a list of all active nodes and their status - Connected or Disconnected.
The Storage Groups widget displays a graph illustrating storage group utilization. The trend graph shows an increase as storage usage grows. A rapid surge in storage utilization might indicate a change in system usage.
We recommend increasing storage capacity or performing a data cleanup when utilization reaches 80%.
The Playbooks in Queue widget shows a graph that includes manually and automatically triggered playbooks and displays how many playbooks were waiting in the queue over the displayed period. The playbook queues are designed to manage playbook executions efficiently and prevent system overload. A rapid surge in the graph values might indicate a temporary peak of triggered playbooks and cause playbooks to take longer to execute and may slow UI performance.
If the queue count is constantly higher than 0, contact Customer Support to discuss scaling options.
The Connectivity Snapshot widget shows the connection status between your Cortex XSOAR tenant and the external gateway. If the status is Disconnected you cannot upgrade Cortex XSOAR, access the Marketplace, or update Docker images.
The Components Snapshot widget shows the status of a Cortex XSOAR component.
Healthy
None
Warning
Check cluster health graphs for temporary peaks or high resources utilization.
Check storage utilization graphs.
If you have recently made changes to your system, verify if these changes might have impacted system components.
Open a support case if you cannot find the source of the issue.
Error
Note
For some components, such as storage, if the system reaches a critical level, Cortex XSOAR will no longer function and you will not be able to access the System Diagnostics page.
We recommend monitoring system components on an ongoing basis to avoid critical-level issues.
The components include:
API
The API request handlers
Storage
System storage and files
Databases
System databases
Telemetry
System telemetry collection
Automation layer
Automation resources and components handler
Playbook Engines
Task queue and priority handling
System Scheduler
System scheduled tasks and prioritization handlers
External Gateways
External resource and connection handling
System Orchestrators
System initialization
Execution Environments
Task execution
Last updated
Was this helpful?