https://github.com/osquery/osquery logo
Title
n

nick fury

05/12/2022, 8:14 PM
I have a problem with my fleet. when I run big queries at my fleet server, my fleet server is crushing. I looked at the log of the Linux kernel and I saw the msg: "The Out of memory: kill process or sacrifice child", the oom killer killed the fleet process. do you have any solution to this problem?
k

Keith Swagler

05/13/2022, 1:10 PM
I think the simple and easiest answer is to add more memory, how much do you have allocated currently?
l

Lucas Rodriguez

05/13/2022, 2:30 PM
Good question! 👆 Also, • What fleet server version are you using? • How many osquery hosts? • Does your query generate too many results? • How many fleet instances are you running?
n

nick fury

05/15/2022, 6:10 PM
@Keith Swagler I am not sure I got the question, do you mean how much memory my server has? @Lucas Rodriguez 1. my fleet version is 3.5.1 2. 4500 3. I don't think so 4. i have 2 fleet servers
l

Lucas Rodriguez

05/16/2022, 9:50 AM
Hi @nick fury,
do you mean how much memory my server has?
Yes. Memory of the host where Fleet is running. There have been many performance improvements added to Fleet since
3.5.1
. We advice to upgrade to the latest version fleet-v4.14.0.
k

Keith Swagler

05/16/2022, 4:32 PM
And for reference we have 18,500 hosts and right now our single server is using 8 GB RAM in total
l

Lucas Rodriguez

05/16/2022, 5:43 PM
Just got the following from our infrastructure team: https://fleetdm.com/docs/deploying/load-testing