Alert: The memory warning threshold of Manager Node has been exceeded

The Memory Warning Threshold Exceeded or Memory Critical Threshold Exceeded alerts appear in Deep Security, alerting the user that "The memory warning threshold of Manager Node <servername> has been exceeded" or "The memory critical threshold of Manager Node <servername> has been exceeded."

The following Deep Security Manager message, recording that the manager node's (default 4GB) allocated memory has been exceeded, is also logged as a system event:

The DSM has reached the maximum memory that's been allocated for the application. (default = 4GB) <InformationItem> <Name>usedMemory</Name> <Value>3.98 GB (4,269,473,792 bytes)</Value> </InformationItem> <InformationItem> <Name>maxMemory</Name> <Value>3.98 GB (4,269,473,792 bytes)</Value>

In the log message above,
<InformationItem> indicates item severity level. ("usedMemory" and "maxMemory" are both information level items.)
<Name> indicates item name. ("usedMemory" represents memory in use by the DSM at the time of log message creation; "maxMemory" represents maximum memory allocated to the DSM).
<Value> indicates item value. ("usedMemory" and "maxMemory" each have a value of 3.98 GB, or 4,269,473,792 bytes).

To resolve the issue, increase the RAM available to the Deep Security Manager to a minimum of 8 GB.

Increase the allocated memory on a Windows server

  1. Go to the Deep Security Manager folder and create a new file called Deep Security Manager.vmoptions.
    This is the same folder where Deep Security Manager.exe is located. For example: C:\Program Files\Trend Micro\Deep Security Manager
  2. Add the following line to the file: -Xmx8g
  3. Save the file and Restart the Deep Security Manager.

Increase the allocated memory on a Linux server

  1. Go to /opt/dsmand create a new file called dsm_s.vmoptions.
  2. Add the following line to the file: -Xmx8g
  3. Save the file and Restart the Deep Security Manager.

Verify the memory allocation change

You can confirm that the memory allocation change has taken effect by going to Administration > System Information Deep Security Manager and viewing the memory information under System Details > Manager Node.