cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
jamesmac
Level 10
Report Inappropriate Content
Message 1 of 4

Kernel panic - VMWare 7?

Comrades,

 

We've had a recurring issue the last 2-3 weeks with a receiver (virtual) apparently seeing kernel panics. This has happened three times now, and prior to this we'd not seen it in a year plus of this particular SIEM. We believe that this coincided with the customer upgrading VMWare infrastructure to 7.0.1.

 

The #ERC is on the customer's premises; the ESM is in AWS cloud. It's at 11.3.0 hotfix 17, I think.

 

Anyone else seeing similar?

 

Regards, James

 

 

3 Replies
pbpillai
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Kernel panic - VMWare 7?

Kernel panics in SIEM VM's occur because the RAM is not dedicated to the VM. In a VM host, the memory is shared among the vm clients. 

If the ERC VM requires 16GB and does not have enough memory to take from the VM host shared memory it will crash due to kernel panic. 

Please ask your VM team to provide dedicated RAM to the ERC VM. 

 

Regards, 

 

Prashanth B Pillai

McAfee Technical Support 

Customer Success Group

jamesmac
Level 10
Report Inappropriate Content
Message 3 of 4

Re: Kernel panic - VMWare 7?

Hi @pbpillai 

 

That's a useful steer. But it doesn't explain why this should suddenly start happening frequently after an upgrade (it's now up to five occurences in 14 days) when it didn't panic once in the eighteen months prior to that.

 

I'd be asking if there was some incompatible code - the more so as certain Microsoft patches have bricked McAfee software in the last year.

 

Cheers,  James

 

 

lratcliffe
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Kernel panic - VMWare 7?

I've checked with our engineering teams and they do not have an active test on ESXi 7.

I have spoken to one customer who is using ESXi 7 with SIEM 11.3.2 without seeing kernel panics.

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community