Kibana Memory increase

[smit patel]

Hi Team,

How to increase Kibana Memory from 1.4 GB to like 3 GB?

I tried below two options but still its saying 1.4 GB memory only.

1.

put below command to "/etc/default/kibana"

export NODE_OPTIONS=--max-old-space-size=3000

2. 

put below line to "/etc/kibana"

--max-old-space-size=3000

In both scenario, it showing as 1.4 GB memory for kibana so can someone please help for the same.

[Rafael Antonio Rodriguez Otero]

try this

https://www.elastic.co/guide/en/elasticsearch/reference/7.x/important-settings.html#heap-size-settings

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/27c68b23-d5eb-47f6-b05e-ce7a6d730a6cn%40googlegroups.com.

[smit patel]

Hi,

Whatever option mentioned here I tried same but still saying same memory. Please help for the same.

[Rafael Antonio Rodriguez Otero]

please, show me the log, /var/log/elasticsearch/nodo-example.log

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/8b0cb43f-ee94-440e-b570-ee0853f5acebn%40googlegroups.com.

[smit patel]

Hi,

Just want to confirm with you, do you need elasticsearch logs or kibana logs? as I am having issue with Kibana memory so just asking you.

[smit patel]

Hi,

Please find attached logs 

[Rafael Antonio Rodriguez Otero]

preferably of the two, it is to confirm the problem.

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/dfe900f0-18a7-41b6-a098-67f28ecb6472n%40googlegroups.com.

[Rafael Antonio Rodriguez Otero]

Okay, seeing the logs you have here and I have to know the following:

Assuming they are the last logs:

1.) Check that you have the correct password in elasticsearch.
2.) Assuming you have more than 6GB you can, use 6GB for java in elasticsearch. confirm this with a htop.
3.) Also confirm the hard disk space.
4.) You have some errors in the kibana template. Do the following:
        4.1) Stop Kibana, FileBeat and Elasticsearch
        4.2) delete the kibana index (DELETE .Kibana *)
        4.3) Restart the services or the entire server.

[smit patel]

Thanks for the update.

2.) Assuming you have more than 6GB you can, use 6GB for java in elasticsearch. confirm this with a htop.

Yes have given 6GB RAM amd have confirmed in GUI. And confirmed password also, its correct.

3.) Also confirm the hard disk space.

Have 700 GB free space.

4.) You have some errors in the kibana template. Do the following:
        4.1) Stop Kibana, FileBeat and Elasticsearch
        4.2) delete the kibana index (DELETE .Kibana *)

Just want to ask you if I delete kibana tamplate does it will delete any data or config file? I think no but still want to confirm with you foe the same.

        4.3) Restart the services or the entire server.

Thanks,
Smit

[Rafael Antonio Rodriguez Otero]

The .kibana * templates are a field template, they do not contain information, it must be automatically regenerated when you start the kibana configuration.

[Rafael Antonio Rodriguez Otero]

other thing important, do you have 6GB to RAM o 8GB to RAM?

[Rafael Antonio Rodriguez Otero]

if you have 6GB for ram, do not put -Xmx6g, because you need to leave memory for the operating system and other applications.

[smit patel]

I have total 32 GB Ram server where I am running these services.

Thanks,
Smit

[Rafael Antonio Rodriguez Otero]

Ok, perfect. show me the log in kibana please.

[smit patel]

Perfect I will send you kibana log file. 

Thanks,
Smit

[smit patel]

Sorry for late.

here sending you messages (var/log/messages) were I can see kibana logs. I have recreated this issue today also.