How To
Summary
Heap files are created when an out of memory issue occurs. These files can be large and take up valuable disk space. If there are too many core dump files, the check for heap dumps during the patch or upgrade can take an extended amount of time. The result is a patch or upgrade can appear as if it is hung. When this happens a similar message is displayed (patchmode) Updating: systemd-219-78.el7.x86_64.
This article addresses steps to resolve this issue.
Steps
Refer to: APAR IJ31074 for information on QRADAR PATCHING PROCESS CAN HANG AT MESSAGE "UPDATING : SYSTEMD-219-78.EL7.X86_64"
- Use SSH to log in to the QRadar Console as root user.
- If the out of memory issue occurred on a manage host, use an SSH session to connect to that host.
- Type the command:
ls -lath /store/jheap/* - Look for files that are larger than 6 kb and contains the extensions .core, .dmp, or tar.gz
- If the heap is not current, you can either remove the file or move it. To move the file:
- Create a backup folder:
mkdir -p /store/IBM_Support - Move the all heap dump file to /store/IBM_Support, for example:
mv /store/jheap/accumulator.accumulator/*.tar.gz /store/IBM_Support mv /store/jheap/accumulator.accumulator/*.dmp /store/IBM_Support mv /store/jheap/accumulator.accumulator/*.core /store/IBM_Support
- Create a backup folder:
Results The patch or upgrade can proceed without the system hang issue from heap dump files.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
30 November 2021
UID
ibm16494721