This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
High RSS memory usage due to MADV settings
editHigh RSS memory usage due to MADV settings
editIn versions of Auditbeat prior to 7.10.2, the go runtime defaults to MADV_FREE
by default.
In some cases, this can lead to high RSS memory usage while the kernel waits to reclaim any pages assigned to Auditbeat.
On versions prior to 7.10.2, set the GODEBUG="madvdontneed=1"
environment variable if you run into RSS usage issues.