Growth in CachedRecord files
- Growth in CachedRecord files generally occurs due to high hardware utilization while processing these files. To resolve this issue, begin by verifying whether the prerequisites and hardware requirements are met.
- Check the total number of configured (enabled) log sources and the log flow rate.
- Considering Step 2, open the <dir>:\ManageEngine\elasticsearch\ES\config\es-additional-wrapper.conf file to increase both the Initial and Maximum Java Heap Size. Please note that both should have the same value. Also, ensure that the value is set in such a way that the ES Java does not consume more than 80% of the RAM.
- It is not suggested to configure the network path for ES storage. However, if the ES data path is a network location, check if the service account has read/write access.
- Restart ES by carrying out the following steps:
- Open the command prompt with admin privileges.
- Navigate to <dir>:\ManageEngine\elasticSearch\ES\bin and execute stopES.bat to stop the engine.
- After a couple of minutes, execute startES.bat to restart the engine.
- If the issue persists, reach out to our technical support team.
New to ADSelfService Plus?
Related Articles
Slow GUI navigation
Verify that the prerequisites and system requirements for EventLog Analyzer are met. Under the Search tab, you will find all the logs collected in a working day. Use this number to calculate the events per second (EPS) manually. Use our tuning guide ...
How do I confirm if the Windows agent is installed properly?
Case 1: Is the configured agent shown in the Devices and Agents pages? In EventLog Analyzer, go to Settings > Devices > Settings > Agents if the configured agent is shown. Case 2: Is the ManageEngine EventLogAnalyzer Agent service present? In the ...
GUI displays a blank page after login
Before beginning the troubleshooting process: Clear the browser cache and cookies. Open in the browser's incognito mode. Check in a different browser. Log in from a different machine. Troubleshooting steps have been provided below: If EventLog ...
Windows agent is running properly but is not collecting logs
Establish a remote connection with the machine running the agent. Open services.msc and verify if the ManageEngine EventLog Analyzer agent service is running. On the remote machine: Open a web browser and ensure that the EventLog Analyzer web console ...
Windows: File Integrity Monitoring (FIM) issues
Prerequisites: An agent needs to be deployed on the respective machine. Open the EventLog Analyzer GUI. Go to the Settings tab > Configuration > Manage File Integrity Monitoring. Configure the folders in the machine that should be monitored. Verify ...