We have an issue where the memory and swap space on our SIEM appliances has been hitting 80-100% utilisation which results in severely degraded performance. I was hoping that I could schedule a daily report from SIEM that would display the memory, CPU and swap space utilisation however I haven't been to figure out how to do it. Has anybody else created something similar or have any suggestions how to do it?
I think you can generate a "View PDF" report and use the Device Status view but I've never tried it.
The best way would be to query the ESM via SNMP from your monitoring platform (if you have one).
Also you can view the resource utilization(graphs) in ESM Management | Maintenance | Device Statistics.