This article applies to BoKS Manager 7.0.0.
Reading very large audit log files in FCC or the WSI might cause the process boks_bccasd to run out of memory. The symptoms may vary, but the most common one is a message like "Server returned HTTP response code: 500". It can also be an "Internal server error", with messages in $BOKS_var/boks_errlog like "Failed to open pipe for ...".
This, in combination with a very large boks_bccasd process (on Solaris or AIX), as seen with the "ps" command, indicates that boks_bccasd is failing to allocate enough memory. On Linux platforms, it's less likely to happen since temporarily allocated memory is returned to the system there. On Solaris and AIX the memory allocation libraries do not in general return freed memory to the system, so the boks_bccasd process gets very large. On AIX there's also a process size limit of 256MB by default.
Resolution / Workaround
To resolve this issue, apply hotfix HFBM-0183, available for download from the HelpSystems Community Portal.
This hotfix installs a boks_bccasd where audit log files are processed in a more memory efficient way; it filters and extracts the requested lines while the file is being read, without reading the entire file into memory.
Note: As a side-effect, the result can only be sorted in row order, ascending or descending. Attempting to, for instance, sort on host name in FCC will not work. In addition, the AIX version has the process limit set to the maximum for 32-bit binaries, 2GB.
Still have questions? We can help. Submit a case to Technical Support.