IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Increased server side memory usage over time

EDR: Increased server side memory usage over time

Environment

  • EDR 7.0 and higher

Symptoms

  • Memory warnings on the server/cluster machines
  • Gunicorn processes related to Coreservices component consuming excessive memory on EDR server/cluster

Cause

Slow memory leak in Coreservice component tracked as CB-33589
 

Resolution

  1.  Edit /etc/cron.d/cb file on EDR Server (master/minions in case of cluster)
  2.  Add the following lines just before the last line in the file ("# Cron requires that each entry in a crontab end in a newline.")
CentOS/RHEL 6.x:
#  CB-33589 workaround
0 23 * * * root /etc/init.d/cb-coreservices restart
CentOS/RHEL 7.x:
#  CB-33589 workaround
0 23 * * * root /bin/systemctl restart cb-coreservices
  1.  Coreservices component will restart at 11pm nightly which addresses the underlying memory issue. 

Related Content


Labels (1)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎01-13-2021
Views:
454
Contributors