Solarwinds.Orion.LogMgmt.Syslog causing high memory in one of pollar other pollar are working fine

Solarwinds.Orion.LogMgmt.Syslog causing high memory in one of pollar other pollar are working fine can you please share the resolution i have searched alot but nothing have been found yet.

  • Hello,

    We experienced this and ultimately our resolution was to migrate the Log Analyzer off the shared DB server where the Orion DB resided.  In our environment, we have 5 load balanced web servers behind an f5 and 5 polling engines.  Over time, we would see the Orion.LogMgmt.Syslog service climb to 98-99% of all RAM.  (That is an impressive leak on a server with 64gb)  Depending on the polling engine this was happening on, the interface would be extremely slow or hang fully.  Killing the process and/or rebooting the server would clean it up.

    It took over 60 days to get some resolution.  During the support case, the engineer let us know that the product could handle about 1k events/sec.  So for the log amount we were sending, moving to a separate DB helped greatly.

    A downside has popped up for us though.  This week we noticed a polling engine having the same issue.  Despite us following the process to move the DB by invoking the Configuration Wizard on all hosts, somehow the Primary Polling engine reverted to the old DB name and server.  This really filled up the event log on the server, and again we had 98% RAM.  We have disabled the service and are working on a new case to figure that one out.

  • So after many support calls, we came down to this response and they closed the case on us.  Unfortunately, we will probably uninstall the Log Analyzer module as "do a clean re-install" is not an acceptable answer.  Reinstalling on 13 servers is insane.

     Our environment has:

    • 6ea load balanced web servers
    • 7ea polling engines
    • Log Analyzer DB on a separate SQL server
    • Orion DB on a separate SQL server

    =====================

    Case # 01098392 - Multiple web servers presents an error when displaying Node Management

     

    Author: Support Team - Technical Support Address [technicalsupport@solarwinds.com]
    Recipient: xxxxxxxxxxxxxxxxxx

    Hi xxxxxxx

    Good day.

    Thank you for the response.

    There are SolarWinds components that tries to connect to the database using that SQL Server. In similar cases that we have encountered, a clean uninstallation and reinstallation should resolve this.

    You may use the article below on how to perform a clean uninstallation.

    Perform a fresh Orion installation (uninstall and reinstall) on the same Windows server
    https://support.solarwinds.com/SuccessCenter/s/article/Perform-a-fresh-Orion-installation-on-the-same-Windows-Server?language=en_US

    Install an additional polling engine, additional web server, or high availability server
    https://documentation.solarwinds.com/en/success_center/orionplatform/content/install-scalabilityengine.htm

     

    =====================