Monitoring, Management & Location Tracking

7.1.1 (64-bit) Known Issue: When there are a very large number of IDS events on the server (more than ~1,000,000, for example) a memory leak can cause the AMP to become extremely slow or completely unresponsive from both the web GUI and the command line interface (CLI).

The behavior is triggered by trying to load the IDS Events page (from the link on the Home > Overview page).

SOLUTIION
If the CLI is accessible, restart services:

# rd

If the CLI is not accessible, reboot the system.

Delete all existing IDS events:

# dbc 'delete from ids_event'

Upgrade to version 7.1.2 or later when available.

Continue to monitor the number of IDS events on the system. You may need to delete them again before you upgrade if the number becomes too large. You might also consider reducing the number of days that the server is retaining IDS events:

AMP Setup > General :: Historical Data Retention :: Traps from managed devices