IBM Support

QRadar: How to monitor percentage of memory that is used by a process

Troubleshooting


Problem

Is there a command I can run as a customer to help me understand when a certain process is running out of memory?

Symptom

NA

Cause

NA

Environment

QRadar 7.2 or higher

Diagnosing The Problem

NA

Resolving The Problem

You can use the "memory" parameter for certain process to see Heap Usage. This shows the Maximum Heap Size, Java Heap Used as well as the percentage of memory used by the process.


Procedure

  1. Using SSH, log in to QRadar as the root user.
  2. From the command-line, type: /opt/qradar/init/ecs-ec memory
  3. The memory usage for ecs-ec is output to the screen.
  4. Optional. To view just the Percentage used value, you can type: /opt/qradar/init/ecs-ec memory | grep Percentage

    For example:


  5. Optional. You can also use the watch command to monitor the Percentage Used value to see whether the process is near running out of memory. For example, watch -n 10 "/opt/qradar/init/ecs-ec memory"



Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"General Information","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":""}]

Document Information

Modified date:
16 June 2018

UID

swg21960716