000016249 - Services hang on RSA Security Analytics and RSA NetWitness appliances due to 'Cannot Allocate Memory' error

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000016249
Applies ToRSA Security Analytics
RSA Security Analytics Decoder
RSA Security Analytics Log Decoder
RSA Security Analytics Concentrator
RSA Security Analytics Hybrid
RSA Security Analytics Broker
RSA Security Analytics All-in-One
RSA NetWitness NextGen
IssueServices hang on RSA Security Analytics and RSA NetWitness appliances due to "Cannot Allocate Memory" error.

The /var/log/messages file reports errors similar to the following, resulting in services hanging:



Feb 21 19:04:50 NWAPPLIANCE20037 nw[32420]: [Utils] [failure] mmap failed: length: 1048576 protection: PROT_READ PROT_WRITE flags: MAP_SHARED offset: 99614720 [OS Error: (12) - Cannot allocate memory]


CauseThe Linux kernel limits the amount of memory the NextGen service can allocate.  This is configured in kernel parameter max_map_count.
Resolution

In order to resolve the issue, adjust the max_map_count kernel parameter to permit NextGen to allocate the memory that it requires.  Please execute the following commands on your appliance:


  • sysctl vm.max_map_count=1000000
  • echo -e \\n# Memory allocation tweak for NextGen\\nvm.max_map_count = 1000000 >> /etc/sysctl.conf

The first command makes the necessary change for the current Linux session.  The second makes the change permanent so that it will survive a reboot.


 


To verify that the solution has been successfully applied by the second command, run the command cat /etc/sysctl.conf and ensure you see these 2 lines at the end:



# Memory allocation tweak for NextGen
vm.max_map_count = 1000000



 


If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.

Legacy Article IDa58932

Attachments

    Outcomes