About [WARN] Java heap size used by Identity Manager message

[MARUBUN SUPPORT]

Hi IM team,

Please let me ask you some questions.

[Environmnet]
CA Identity Manager 14.4CP1

[Question]
My customer saw the following warning message on CAIM14.1(vApp) 2 boxes.
[WARN] Java heap size used by Identity Manager: 1966MB/2048MB (96%)
[WARN] Java heap size used by Identity Manager: 2011MB/2048MB (98%)

I think that java heap size is not enough.
1:
If we increase the size, we have to increase according to the following manual.
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/installing/install-on-jboss-or-wildfly/fine-tune-jboss-or-wildfly-configurations.html

=====
Navigate to <JBOSS_HOME>/bin.
Open 
standalone.conf.bat
 for editing.
Set the JVM parameters in JAVA_OPTS with the following recommended values:
JVM Minimum Heap Size:
 512 MB
JVM Maximum Heap Size:
 4 GB
=====
correct or not?
If it is not correct, please let me know how to increase the size.

2:
My customer would like to know the root cause why the size is not enough.
Can we investigate the root cause?

3:
The message is WARING.
So even if we see the message, IM keeps working correctly.
Correct or not?

Best regards,
Marubun Support

[MARUBUN SUPPORT]

In additional question:
According to the following manual,
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/installing/install-on-jboss-or-wildfly/fine-tune-jboss-or-wildfly-configurations.html
We have to modify the following files.
Windows : standalone.conf.bat
Linux : standalone.conf
It is correct, isn't it?

Best regards,
Hirokazu.M,

[Dmytro Kvyatkovsky]

Dear Hirokazu-san,

Yes, this is correct for the standalone IM installations.
For vApp see this document for instructions:
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-4/virtual-appliance/administering-virtual-appliance.html#concept.dita_484b93c7f06198e8b27adcc2537229358eb17777_CustomJVMArguments

Best regards,
Dmytry

[MARUBUN SUPPORT]

Hi Dmytry

Thank you for your reply.
Please let me ask you a question.
My customer is using IM on Linux.
In this case:
They have to modify standalone.conf file.
According to my customer,
/JBOSS_HOMEDIR/bin> ls -la standalone.conf
lrwxrwxrwx 1 root    root       44 Sep 29 17:18 standalone.conf -> / JBOSS_HOMEDIR/bin/startup/wildfly.conf
The file(standalone.conf) was symbolic link and the permission was as follows.
/JBOSS_HOMEDIR/bin> ls -la / HOMEDIR /bin/startup/wildfly.conf
-rw-rw-r-- 1 wildfly wildfly 1435 Sep 29 17:18 /opt/CA/wildfly-idm/bin/startup/wildfly.conf

So they have to modify the file using root user and  restart Jboss service.
Correct or not?

Best regrads,

[MARUBUN SUPPORT]

Hi Dmytry

Sorry!
My customer was not IM standalone but vAPP.
So they have to see the following manual.
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/14-4/virtual-appliance/administering-virtual-appliance.html#concept.dita_484b93c7f06198e8b27adcc2537229358eb17777_CustomJVMArguments
However, I'm not sure to increase java heap area.
According to the above manual,

-Xms512m -Xmx2048m -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true -XX:+UseLargePages -Djava.security.egd=file:/dev/./urandom

What file should I modify?

Best regrads,
HIrokazu.M,

[Dmytro Kvyatkovsky]

The file name and location is provided in the document.
For Identity Manager it's /opt/CA/VirtualAppliance/custom/IdentityManager/jvm-args.conf

[MARUBUN SUPPORT]

HI,

I have knowledge of IM and have no vAPP IM environment.
So please let me ask you some questions.
According to the manual,
2.Edit the jvm-args.conf file for the relevant product:
/opt/CA/VirtualAppliance/custom/IdentityManager/jvm-args.conf
/opt/CA/VirtualAppliance/custom/IdentityGovernance/jvm-args.conf
/opt/CA/VirtualAppliance/custom/IdentityPortal/jvm-args.conf

We have to modify 2 files.
Correct?

Also,4.Make the necessary changes to the JVM arguments specified after the "=" character.
if we increase java heap only, we have to set the java heap max value in  the argement of -Xmx.
-Xms512m -Xmx2048m -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -Djava.net.preferIPv4Stack=true -Djava.awt.headless=true -XX:+UseLargePages -Djava.security.egd=file:/dev/./urandom

Correct?

Best regrads,

[Dmytro Kvyatkovsky]

No, only one file is to be modified. For Identity Manager server it's /opt/CA/VirtualAppliance/custom/IdentityManager/jvm-args.conf file.

By default the above file contains disabled setting:

config@IMvApp144 VAPP-14.4.1 (192.168.0.34):~ > cat /opt/CA/VirtualAppliance/custom/IdentityManager/jvm-args.conf
#JAVA_OPTS=-Xms512m -Xmx2048m -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompressedOops -XX:+UseLargePages -Djava.net.preferIPv4Stack=true
config@IMvApp144 VAPP-14.4.1 (192.168.0.34):~ >

So you need to un-comment it and set required Xmx value.

[MARUBUN SUPPORT]

HI

Thank you for your help.
I will tell mu customer to modify only the /opt/CA/VirtualAppliance/custom/IdentityManager/jvm-args.conf file for vAPP IM.

Best regards,