Troubleshooting
Problem
Is there a command I can run as a customer to help me understand when a certain process is running out of memory?
Symptom
NA
Cause
NA
Environment
QRadar 7.2 or higher
Diagnosing The Problem
NA
Resolving The Problem
You can use the "memory" parameter for certain process to see Heap Usage. This shows the Maximum Heap Size, Java Heap Used as well as the percentage of memory used by the process.
Procedure
- Using SSH, log in to QRadar as the root user.
- From the command-line, type: /opt/qradar/init/ecs-ec memory
- The memory usage for ecs-ec is output to the screen.
- Optional. To view just the Percentage used value, you can type: /opt/qradar/init/ecs-ec memory | grep Percentage
For example:
- Optional. You can also use the watch command to monitor the Percentage Used value to see whether the process is near running out of memory. For example, watch -n 10 "/opt/qradar/init/ecs-ec memory"
[{"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General Information","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
30 September 2021
UID
swg21960716