IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Dashboard could not locate the index-pattern Not sure how to read from .evtx files »
Elastic Docs ›Winlogbeat Reference [8.9] ›Troubleshoot ›Common problems

High RSS memory usage due to MADV settings

edit

High RSS memory usage due to MADV settings

edit

In versions of Winlogbeat prior to 7.10.2, the go runtime defaults to MADV_FREE by default. In some cases, this can lead to high RSS memory usage while the kernel waits to reclaim any pages assigned to Winlogbeat. On versions prior to 7.10.2, set the GODEBUG="madvdontneed=1" environment variable if you run into RSS usage issues.

« Dashboard could not locate the index-pattern Not sure how to read from .evtx files »