vDefend SSP Alarm: Security Services Platform cluster memory usage is high or very high

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

You are running SSP 5.0 or later and have encountered an alarm with the description:
"The memory usage of Security Services Platform cluster is currently {{ .Value }}%, which exceeds the threshold value."

This indicates that one or more nodes in the SSP cluster are experiencing high memory usage, potentially impacting the stability and performance of workloads.

Environment

vDefend SSP Version: 5.0 and later

Cause

Memory-Intensive Applications: Certain workloads require more memory than allocated or expected, due to temporary spikes in workload.

Resolution

Cluster level memory usage aggregated value of all node memory usage

• On the SSPI UI, Navigate to Lifecycle Management → Instance management → Edit Deployment Size to increase the nodes by 1. 
• Another option would be to scaleout.  

On the Security Services Platform UI:

Navigate to System > Platform & Features > Core Services

If the memory intensive applications are any of the following, scale out corresponding category. (From 'k top pods -n nsxi-platform --sort-by=memory' we can know if the memory intensive applications are part of the list)

rawflowcorrelator, overflowcorrelator / druid-middle-manager, druid-broker/ latestflow   - Analytics
kafka-controller, kafka-broker - Messaging
minio - Data Storage 
metrics-manager, metrics-app-server,metrics-query-server - Metrics (Refer KB: 384111 for metrics specific memory spike issues)