Article Number
000039727
Applies To
RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.5.3.1
Platform: CentOS
O/S Version: 7
Issue
Integration-server is offline in UI, and logs show below errors.
/var/log/netwitness/integration-server/integration-server.log:
2021-05-27 09:43:49,219 [nchMessageListenerContainer-19] WARN API|Failure /rsa/notification/send [counter=13662 reason=OutOfMemoryError::Java heap space]
2021-05-27 09:43:49,229 [nchMessageListenerContainer-19] ERROR c.r.a.l.e.t.LaunchMessageListenerContainer|Consumer thread error, thread abort.
java.lang.OutOfMemoryError: Java heap space
at java.base/java.util.Arrays.copyOf(Arrays.java:3745)
at java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal(AbstractStringBuilder.java:172)
at java.base/java.lang.AbstractStringBuilder.append(AbstractStringBuilder.java:686)
at java.base/java.lang.StringBuffer.append(StringBuffer.java:409)
at java.base/java.io.StringWriter.write(StringWriter.java:99)
at java.base/java.io.Writer.write(Writer.java:213)
Cause
Integration-Server service gets out of memory due to high number of email alerts being processed.
Resolution
1. Please login NwServer and edit
/etc/netwitness/integration-server/integration-server.conf file.
2. Set the -Xmx parameter to 6G (default is 3G).
sample entry:
JAVA_OPTS="-XX:+UseG1GC -Djava.security.egd=file:/dev/./urandom -Xmx6G"
3. Restart the service using below command.
systemctl restart rsa-nw-integration-server.service
