000031531 - How to identify processes that are consuming swap memory on RSA Security Analytics appliances

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000031531
Applies ToRSA Product Set: Security Analytics
RSA Version/Condition: 10.4.x, 10.5.x
Platform: CentOS
O/S Version: EL6
ResolutionThe script below can be used to identify processes that are consuming swap memory on Security Analytics appliances.
 
[root@SA-AIO ~]# grep Swap /proc/[1-9]*/smaps | grep -v '\W0 kB' | tr -s ' ' | cut -d' ' -f-2 | sort -t' ' -k2 -n | tr -d ' ' | tail -20 | cut -d'/' -f3 | xargs ps -o vsz=MEMORY -o user,group=GROUP -o comm,args=ARGS
MEMORY USER     GROUP    COMMAND         ARGS
4120752 logstash logstash java           /usr/bin/java -Djava.io.tmpdir=/var/lib/logstash -Xmx500m -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -
263256 puppet   puppet   puppet          /usr/bin/ruby /usr/bin/puppet master
3698588 root    root     NwLogCollector  /usr/sbin/NwLogCollector --stopwhenready
1547284 root    root     NwIPDBExtractor /usr/sbin/NwIPDBExtractor --stopwhenready

Attachments

    Outcomes