This section describes new features in the Trellix IOC Streaming release 1.3.169
The IOC Streaming now enables the following configurations on Linux and Windows Server hosts to alleviate excessive memory usage:
eps_throttling_rate
This feature specifies a maximum limit for the rate of matched events that can be throttled on the system.
eps_calculation_interval
This feature limits the matched events queue size to an acceptable level.
Note
These new configurations are only available through API. These should be changed only for the machines exhibiting high memory usage by the IOC Streaming process and it is recommended to create a new host set and custom policy to apply these configurations.