Collectors are set to use 128MB of RAM by default. If your Collectors are collecting more than a few files, you should increase the max heap size the Collector can use.
To increase the maximum Java Heap size:
1. Open install_directory/config/user.properties.
2. Add or locate the following parameter:
3. Increase the
wrapper.java.maxmemory value, based on the number of files you expect to collect from.
- 512MB for dozens of files
- 1024MB for 100 files
- 2048MB for more than 100 files
- 4096MB for more than 1000 files
These are general guidelines since your exact memory requirement depends on how many sources are configured, log volume, use of wildcards and recursive scans in the path expressions, and filters.
4. Restart the collector using the command:
Monitor memory issues
To monitor collectors for out-of-memory issues, ingest the collector logs, and schedule following search to run every 15 minutes with time range last 15 minutes.
_sourceCategory=*LocalCollectorLogs* "java.lang.OutOfMemoryError: Java heap space" | timeslice 15m | count by _timeslice, _collector | "https://help.sumologic.com/Send_Data/Collector_FAQs/Increase_memory_in_a_Collector" as sumoHelp | concat ("collector: ", _collector, " identified with insufficient max heap memory. Increase java heap space allocation for it. Refer: ", sumoHelp) as msg | sort by _timeslice, _collector | fields -sumoHelp
Increase memory for collectors upgraded from versions before 19.137
If the user.properties file contains these lines:
wrapper.app.parameter.2=-b wrapper.app.parameter.3=installerSources/selected.json wrapper.filter.trigger.1000=java.lang.OutOfMemoryError
you must append the following to the end of the Sumo_install_dir/config/wrapper.conf file:
# Overwrite the defaults with any properties in user.properties #include ./config/user.properties
Then update user.properties as follows:
- Delete the above-mentioned three lines (the lines that begin with
- Add the following line:
You can now restart the Collector as described in Start or Stop a Collector Using Scripts.