FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
RuiChang
Staff
Staff
Article Id 409420
Description

 

This article provides a method to fix the GC overhead limit exceeded error.

 

Scope

 

FortiSIEM.

 

Solution

 

User performing VMSDK pull events may encounter the error 'Execution failed: failed to connect: GC overhead limit exceeded'. The error can be found in Admin -> Setup -> Pull Events:

 

RuiChang_3-1756902912973.png

 

 

This error indicates the JVM is unable to free up memory during the GC process. The value can be increased via the command below:

 

#vi /opt/phoenix/bin/runJavaAgent.sh

 

Change the value in Line 14 from 2048M to 8192:

 

Before:


 # exec …..- Xmx2048M -….."$@"

 

After:

 

# exec …..- Xmx8192M -….."$@"

 

Save the changes:


# :wq

 

After that, pull events should start working normally.

Contributors