What is the recommend Linux OS swappiness value for an EDR Server/Cluster?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What is the recommend Linux OS swappiness value for EDR Server/Cluster?

Environment

• EDR (All Versions)
• RedHat/CentOS 6.x, 7.x, 8.x

Resolution

For optimal performance, VMWare Carbon Black recommends a swappiness value of 1 assuming sufficient physical RAM is available, which will force the OS to use physical RAM as possible before using swap.

1.     Execute:   

sysctl -w vm.swappiness=1

2.     Edit /etc/sysctl.conf and add or modify the parameter:   

vm.swappiness=1

Additional Information

For a cluster, run the commands on master and all minions.