|Applies To||RSA Security Analytics|
RSA Security Analytics Decoder
RSA Security Analytics Log Decoder
RSA Security Analytics Concentrator
RSA Security Analytics Hybrid
RSA Security Analytics Broker
RSA Security Analytics All-in-One
RSA NetWitness NextGen
|Issue||Services hang on RSA Security Analytics and RSA NetWitness appliances due to "Cannot Allocate Memory" error.|
The /var/log/messages file reports errors similar to the following, resulting in services hanging:
|Cause||The Linux kernel limits the amount of memory the NextGen service can allocate. This is configured in kernel parameter max_map_count.|
In order to resolve the issue, adjust the max_map_count kernel parameter to permit NextGen to allocate the memory that it requires. Please execute the following commands on your appliance:
The first command makes the necessary change for the current Linux session. The second makes the change permanent so that it will survive a reboot.
To verify that the solution has been successfully applied by the second command, run the command cat /etc/sysctl.conf and ensure you see these 2 lines at the end:
If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.
|Legacy Article ID||a58932|