The overall memory swap usage (18%) has exceeded ...

[AEK]

Swap Usage increased , how can see which tasks increases swap memory.(Now is 18% .)

How can I decrease this SwapUsage?

Model Cisco C600V

Version: 12.1.0

[Libin Varghese]

You would need to open a TAC case with remote access details to your appliance to narrow down a cause for this.

TAC would need to review what process is taking up memory and resulting in increase of swap memory.

In general, high email flow with multiple resource intensive dictionaries/regular expressions/filters/policies or above recommended scanning size or connection count configurations can result in swap memory usage.

Regards,

Libin

[AEK]

I have already removed some of the content filter and disable dictionaries/regular expressions, but unfortunately SwapUsage does not go down . 

[Mathew Huynh · Accepted solution]

As Libin shared, a TAC case would be the best path to do some deeper diagnosis on this as there are numerous factors which could come into play, not limited to:

- URL filtering enabled with high threshold settings not adhering to: https://www.cisco.com/c/en/us/support/docs/field-notices/641/fn64111.html
- High flow of emails coming in burst intervals will lead to excessive memory consumption.
- Expensive configuration on scanning engines outside of recommended thresholds (combined with high flow of emails is a recipe for disaster).
- Expensive message/content/dictionary rules.

Typically if it 's at a high swap over a long duration due to some misconfiguration/overall memory consumption due to varying mail flows, the swap % may not immediately or decrease at all and a reboot may be required to free the memory back.

Close monitoring thereafter may be required if swap builds too quickly then there's an inherent issue at hand.

Regards,
Mathew