000038993 - Error retrieving swap info from /proc/swaps on RSA NetWitness host deployed in Azure platform

Document created by RSA Customer Support Employee on Jun 23, 2020
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000038993
Applies ToRSA Product Set: NetWitness Platform
RSA Product/Service Type: NetWitness Azure Virtual Machine
RSA Version/Condition: 11.3.x, 11.4.0.x
Platform: CentOS 7
IssueRSA NetWitness host that is deployed in Azure platform shows /var/log/messages flooding with an error below.

collectd[2470]: nwprocess.py: Error retrieving swap info from /proc/swaps
ResolutionThe error is fixed in 11.4.1.
 
WorkaroundSSH to a host in problem.
  1. Backup waagent.conf

    # cd /etc
    # cp waagent.conf waagent.conf.bak

  2. Update /etc/waagent.conf with below parameters and save it:

    # vi /etc/waagent.conf 
    ResourceDisk.Format=y
    ResourceDisk.Filesystem=ext4
    ResourceDisk.MountPoint=/mnt/resource
    ResourceDisk.EnableSwap=y
    ResourceDisk.SwapSizeMB=2048

  3. Restart WALinuxAgent service by running the command below.

    # systemctl restart waagent.service

  4. Run one of the following commands to show the swap space that is being used after the restart:

    # dmesg | grep swap
    # swapon -s
    # cat /proc/swaps
    # file /mnt/resource/swapfile
    # free| grep -i swap

  5. If it does not show the swap space, reboot the Virtual Machine.

    # shutdown -r now

Attachments

    Outcomes