Analyzing Webswing 'java --patch-module' Process Alarms

Products

• Network Observability
• Spectrum

Issue/Introduction

Spectrum is generating a critical alert stating that the process `'java --patch-module java.desktop=/usr/spectrum/webtomcat/bin/../webswing/tmp/release/web-inf_lib-ext_modpatch-java-desktop-24.1.1.jar'` is no longer running. This alarm typically includes a specific Process ID (PID) and is monitored by the system host device model.

<!--10-->Critical xxxxx.xxx.xxx.xxx<!--1773666979000 2506124-->Mar 16, 2026, 9:16:19 AM EDT The process 'java --patch-module java.desktop=/usr/spectrum/webtomcat/bin/../webswing/tmp/release/web-inf_lib-ext_modpatch-java-desktop-24.1.1.jar' is no longer running.  It was being monitored by its Process ID of 1661212.   This was instance 2 of ' (java --patch-module java.desktop=/usr/spectrum/webtomcat/bin/../webswing/tmp/release/web-inf_lib-ext_modpatch-java-desktop-24.1.1.jar)'.  This process is being monitored by model xxx.xxx.xxxx.xxx.   Host_Device (name - xxx.xxx.xxxx.xxx). - 0xfff00582 System Host_Device 10

Environment

Dx NetOps Spectrum any version

Resolution

These particular alarms are monitoring user sessions.  So it is expected you will see an alarm when a user session is terminated