From f252962a211e0f2ddf4a8cc5d58eaca0b61281ed Mon Sep 17 00:00:00 2001 From: Craig Date: Mon, 14 Jun 2021 12:52:58 -0400 Subject: [PATCH] memory limits raised memory limits to 128mb which is larger than the highest observed peak model bytes for the most memory hungry jobs in this event class. --- .../modules/security_auth/ml/auth_high_count_logon_events.json | 2 +- .../ml/auth_high_count_logon_events_for_a_source_ip.json | 2 +- .../modules/security_auth/ml/auth_high_count_logon_fails.json | 2 +- .../modules/security_auth/ml/auth_rare_hour_for_a_user.json | 2 +- .../security_auth/ml/auth_rare_source_ip_for_a_user.json | 2 +- .../modules/security_auth/ml/auth_rare_user.json | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events.json index 93bce6994d874c..ee84fb222bb5c7 100644 --- a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events.json +++ b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events.json @@ -18,7 +18,7 @@ }, "allow_lazy_open": true, "analysis_limits": { - "model_memory_limit": "2mb" + "model_memory_limit": "128mb" }, "data_description": { "time_field": "@timestamp" diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events_for_a_source_ip.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events_for_a_source_ip.json index 9d59a9d08fb696..7bbbc81b6de7ab 100644 --- a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events_for_a_source_ip.json +++ b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_events_for_a_source_ip.json @@ -23,7 +23,7 @@ }, "allow_lazy_open": true, "analysis_limits": { - "model_memory_limit": "12mb" + "model_memory_limit": "128mb" }, "data_description": { "time_field": "@timestamp" diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_fails.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_fails.json index bea78e65b00b54..4b7094e92c6ecf 100644 --- a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_fails.json +++ b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_high_count_logon_fails.json @@ -18,7 +18,7 @@ }, "allow_lazy_open": true, "analysis_limits": { - "model_memory_limit": "2mb" + "model_memory_limit": "128mb" }, "data_description": { "time_field": "@timestamp" diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_hour_for_a_user.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_hour_for_a_user.json index 891f82bc51cf71..bb86d256e59df0 100644 --- a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_hour_for_a_user.json +++ b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_hour_for_a_user.json @@ -22,7 +22,7 @@ }, "allow_lazy_open": true, "analysis_limits": { - "model_memory_limit": "3mb" + "model_memory_limit": "128mb" }, "data_description": { "time_field": "@timestamp" diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_source_ip_for_a_user.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_source_ip_for_a_user.json index 8f0149f22f77db..6f72e148fa38ed 100644 --- a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_source_ip_for_a_user.json +++ b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_source_ip_for_a_user.json @@ -23,7 +23,7 @@ }, "allow_lazy_open": true, "analysis_limits": { - "model_memory_limit": "6mb" + "model_memory_limit": "128mb" }, "data_description": { "time_field": "@timestamp" diff --git a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_user.json b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_user.json index 3d227736de0c87..5cb9c7112b29d3 100644 --- a/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_user.json +++ b/x-pack/plugins/ml/server/models/data_recognizer/modules/security_auth/ml/auth_rare_user.json @@ -22,7 +22,7 @@ }, "allow_lazy_open": true, "analysis_limits": { - "model_memory_limit": "2mb" + "model_memory_limit": "128mb" }, "data_description": { "time_field": "@timestamp"