Technical Tip: How to view, verify and kill the processes consuming more memory in the GUI

[Kush_Patel]

Description	This article describes how it is possible to monitor the top processes using CPU and memory using the CLI command 'diagnose sys top', but this is now achievable using the GUI. From FortiGate v7.0 and later, a new feature is introduced that can allow the admin to monitor and troubleshoot the issue using the ‘Process Monitor’ tool. The Process Monitor page provides real-time insights into currently running processes, displaying their respective CPU and memory usage. This valuable feature equips administrators with the ability to not only observe but also manage system processes effectively. Within this page, a comprehensive list of active processes is conveniently presented, enabling administrators to easily browse, arrange, and refine the displayed information using filters. For enhanced control, administrators can take action by terminating processes when necessary. This includes the option to terminate processes that are consuming a significant amount of memory, contributing to the optimization of system performance.
Scope	FortiGate 7.0 and above.
Solution	To navigate through this functionality within the FortiGate GUI, follow these steps: Access Process Monitor: Log in to the FortiGate's graphical user interface (GUI). Navigate to the top right corner and select 'admin_account' and then System, where the 'Process Monitor' page is. Pause the output using the pause button marked with a red rectangle below: It is possible to select the CPU/Memory widget on Dashboard Status to access the 'Process Monitor':   Monitor Active Processes: Upon reaching the Process Monitor page, a comprehensive list of currently active processes will be showcased. These processes are accompanied by detailed information regarding their CPU and memory utilization. To verify all active UDP/TCP ports and processes in the Firewall, use the following command in the CLI: diagnose sys tcpsock  diagnose sys udpsock  Sorting and Filtering: Administrators can seamlessly sort and filter the list of processes based on various criteria such as memory usage. This allows for streamlined identification of processes consuming substantial memory resources. It is even possible to apply filters to get precise output as follows:   Process Verification: Once the processes have been identified, consuming a notable amount of memory, it is crucial to verify whether they are essential for system functionality or if they could potentially be terminated without adverse effects. Process Termination: In cases where it is deemed necessary to alleviate memory usage, administrators can opt to terminate specific processes directly from the Process Monitor page. This action helps reclaim memory resources and enhance system responsiveness.  A process can be killed by selecting it, and and Crash log (related output of CLI command 'diagnose debug crashlog read') could be generated if 'Kill & Trace' option is selected:   Y value of the chart can be changed by selecting the ICON (highlighted) on top to shuffle between '%' and 'MiB': By effectively utilizing the Process Monitor page on the FortiGate GUI, administrators can proactively manage memory consumption and optimize overall system performance. This capability empowers administrators to ensure the efficient operation of their FortiGate devices while maintaining a keen understanding of active processes and their resource utilization. Related articles: Technical Tip: How to restart/kill one or several processes on the FortiGate with CLI commands Technical Tip: How to create a script to kill WAD process automatically