QRadar Failing to Install App - Out of Memory
Hello,
I am trying to install a QRadar app (IBM Cloud Discovery App for QRadar) and am running into the following error: The application requested more memory than is currently available.
I have an app host that I believe has enough memory, running the free command on the console: Mem: 11G total 546M free 6.9G available
Swap: 8.8G total 7.9G free
Does the new memory check within QRadar look at the just the free memory or does it take into consideration the free swap memory as well?
Thanks, Tim
Hey Tim, we are working on some support content around this specifically. That being said, Cloud Discovery App will consume 4GB of memory when you install it. The error message only looks at the available space overall (swap is not counted) and the App Host will allocate 80% of that 11 GB for app use. Even if the app is installed and not in use, the full memory is allocated (i.e. the current memory usage is static for the allocation, it is not a dynamic value based on actual usage).
If you want to see how much memory is being allocated, our App team provided this query that will help. This query is intended to be run on the Console appliance, not the app host as the required tables do not exist on the app host itself.
psql -U qradar "select id, name, status, task_status, image_repo, memory from installed_application union select NULL as id, '' as name, '' as status, '' as task_status, '' as image_repo, sum(memory) from installed_application ORDER BY id;"
This command should output a table to the screen that shows the sum of the memory allocated to apps. Sorry for the delayed response, but I was out of the office for a few days.
Hope this helps, but let us know if you have follow-up questions.
- Jonathan