IBM Support

Increased memory utilization in QRadar Network Security firmware 5.4

Troubleshooting


Problem

When running QRadar Network Security (IQNS) firmware 5.4, you may see the memory graphs show increased memory utilization and possible System Events.

Symptom

Memory graphs show increased memory utilization but do not appear to match the actual memory usage on the appliance. If this is high enough, it could cause a System Event to trigger as indicated below:

Event ID: GLGSY0039W
Event Description: The system memory use of XX percent has exceeded the specified limit of 90 percent

Cause

This is due to a known defect in 5.4 with memory calculation. This is due to it not considering cached memory properly.

Resolving The Problem

To resolve the issue, contact Support and request patch 5.4-ISS-XGS-All-Models-Hotfix-IF0001 or later.


[{"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Not Applicable","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.4","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22002436

Page Feedback