Failed to open persistent datastore: MapViewOfFile


(Мария Ивановна) #1

When I launch auditbeat, I see such a message: "failed to open persistent datastore: MapViewOfFile: Not enough storage is available to process this command".
The file beats.db has a size of 1 gigabyte and no longer increases.
Auditbeat version: 6.3.0
My config:

#========================== Modules configuration =============================
auditbeat.modules:

module: file_integrity
paths:
D:_Public\Exchange
E:\Departament
recursive: true
scan_rate_per_sec: 25 MiB
scan_at_start: false

#==================== Elasticsearch template setting ==========================
setup.template.settings:
index.number_of_shards: 3

#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
hosts: ["{SITE}:{PORT}"]
username: "{username}"
password: "{pass}"

xpack.monitoring.enabled: true


(Adrian Serrano) #2

This means that memory-mapping the beats.db file is failing because there is not enough memory available (or better said, address-space).

Are you running auditbeat on a 32-bit system?


(Мария Ивановна) #3

You're right!
Nearly..
I used the 32 bit version auditbeat and it stopped working after the file was full(1GB). I replaced auditbeat with a 64 bit version and it all worked

The topic can be closed

Thank you!


(Andrew Kroh) #4