High memory usage-bluecoat-sgos
Vendor: bluecoat
OS: sgos
Description:
Indeni will alert if the memory utilization of a device is above a high threshold. If the device has multiple memory elements, each will be inspected separately and alert for.
Remediation Steps:
Determine the cause for the high memory usage of the listed elements.
|1. Login via https to the ProxySG and go to Statistics > System > Resources > Memory use. Review the current Memory utilization graph.
|2. Login via ssh to the ProxySG and run the command "show resources" which provides information about current memory usage.
|3. Check if the unit is dealing with high traffic volume.
|4. Check the ICAP service maximum number of connections. For more information review the following Bluecoat guides:
|- https://origin-symwisedownload.symantec.com/resources/webguides/proxysg/certification/sg_firststeps_webguide/Content/Troubleshooting/Malware%20Prevention/troubleshoot_sg_unresponsive.htm
|- https://origin-symwisedownload.symantec.com/resources/webguides/contentanalysis/13/system_webguide/Content/Topics/Tasks/Stats_Mem.htm
|5. If the problem persists, contact Symantec Technical support at https://support.symantec.com for further assistance.
How does this work?
This script logs into the Bluecoat Proxy using SSH and retrieves the memory utilization from the “show resources” command.
Why is this important?
Monitoring memory usage is critical for evaluate the system’s health and make sure it’s not over utilized. High memory usage could lead to production impact in terms of dropped packets.
Without Indeni how would you find this?
It is possible to poll this data through SNMP.
bluecoat-show-resources
name: bluecoat-show-resources
description: Fetch cpu usage stats
type: monitoring
monitoring_interval: 1 minute
includes_resource_data: true
requires:
vendor: bluecoat
os.name: sgos
comments:
memory-total-kbytes:
why: |
Tracking total memory on the system is critical to evaluate and assess current memory utilizatiion.
how: |
This script logs into the Bluecoat Proxy using SSH and retrieves the total memory from the "show resources" command.
can-with-snmp: true
can-with-syslog: false
memory-free-kbytes:
why: |
Tracking free memory on the system is critical to evaluate memory utilization and identify possible memory leaks.
how: |
This script logs into the Bluecoat Proxy using SSH and retrieves the total memory from the "show resources" command.
can-with-snmp: true
can-with-syslog: false
memory-usage:
why: |
Monitoring memory usage is critical for evaluate the system's health and make sure it's not over utilized.
High memory usage could lead to production impact in terms of dropped packets.
how: |
This script logs into the Bluecoat Proxy using SSH and retrieves the memory utilization from the "show resources" command.
can-with-snmp: true
can-with-syslog: false
disk-free-kbytes:
why: |
Monitoring disk usage is critical for evaluate the system's health and make sure it's not over utilized.
High disk usage could lead to production impact in terms of dropped packets and slow connectvity.
how: |
This script logs into the Bluecoat Proxy using SSH and retrieves the disk utilization from the "show resources" command.
can-with-snmp: true
can-with-syslog: false
disk-used-kbytes:
why: |
Tracking used disk on the system is critical. Used to display how much, in kilobytes, of the Disk is being used.
how: |
This script logs into the Bluecoat Proxy using SSH and retrieves the disk utilization from the "show resources" command.
can-with-snmp: true
can-with-syslog: false
disk-total-kbytes:
why: |
Tracking total disk available on the system is critical. Used to display the total disk size, in kilobytes.
how: |
This script logs into the Bluecoat Proxy using SSH and retrieves the disk size from the "show resources" command.
can-with-snmp: true
can-with-syslog: false
disk-usage-percentage:
why: |
It is very important to monitor the disk space usage of a system. If the disk space is full it will prevent writing more data to the disk. Compressing and moving data from a disk that is 100% full is time consuming, which is why it is important to take care of any such issue early.
how: |
This script logs into the Bluecoat Proxy using SSH and retrieves the disk size from the "show resources" command.
can-with-snmp: true
can-with-syslog: false
steps:
- run:
type: SSH
command: show resources
parse:
type: AWK
file: show-resources.parser.1.awk
cross_vendor_high_memory_usage
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/crossvendor/cross_vendor_high_memory_usage.scala