Logstash eating memory and eventually gets oom-killed

I'm running logstash 7.2.0 on a Linux on z RHEL 7.4 64 bits. Everything works just fine, ie elasticsearch, logstash, kibana, for a about 1-1.5 day then logstash gets killed by the OS as a OOM. I have changed heap size in jvm.options from 1G to 2G but no real difference. The virtual memory is increasing all the time and eventually it is around 20GB it gets killed. If I restart logstash things start to flow nicely again for another 1-1.5 days.
Oct 29 15:17:09 rl210619 kernel: Out of memory: Kill process 54400 (java) score 839 or sacrifice child
Oct 29 15:17:09 rl210619 kernel: Killed process 54400 (java) total-vm:20772680kB, anon-rss:14015480kB, file-rss:24kB, shmem-rss:0kB
Any idea what I can do?
Thanks
Peter

If you have a 20 GB JVM with a 1 GB heap then it is holding on to large amounts of native memory. This could be due to finalization delays. Take a dump and see what the finalization queue looks like.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.