Failed to open persistent datastore: MapViewOfFile

(Мария Ивановна) #1

When I launch auditbeat, I see such a message: "failed to open persistent datastore: MapViewOfFile: Not enough storage is available to process this command".
The file beats.db has a size of 1 gigabyte and no longer increases.
Auditbeat version: 6.3.0
My config:

#========================== Modules configuration =============================

module: file_integrity
recursive: true
scan_rate_per_sec: 25 MiB
scan_at_start: false

#==================== Elasticsearch template setting ==========================
index.number_of_shards: 3

#-------------------------- Elasticsearch output ------------------------------
hosts: ["{SITE}:{PORT}"]
username: "{username}"
password: "{pass}"

xpack.monitoring.enabled: true

(Adrian Serrano) #2

This means that memory-mapping the beats.db file is failing because there is not enough memory available (or better said, address-space).

Are you running auditbeat on a 32-bit system?

(Мария Ивановна) #3

You're right!
I used the 32 bit version auditbeat and it stopped working after the file was full(1GB). I replaced auditbeat with a 64 bit version and it all worked

The topic can be closed

Thank you!

(Andrew Kroh) #4