invoked oom-killer:

journalctl -r | grep "invoked oom-killer"

journalctl -r | grep "invoked oom-killer" | cut -d":" -f4- | cut -d":" -f1 | trim | sort -rnk1 | uniq -c | sort -rnk1
     4 systemd invoked oom-killer
     4 php-fpm7.2 invoked oom-killer
     3 sshd invoked oom-killer
     1 tar invoked oom-killer
     1 mysqld invoked oom-killer
     1 dockerd invoked oom-killer

Jan 26 04:40:29 SERVER_NAME kernel: runc:[2:INIT] invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0

Jan 26 04:40:29 SERVER_NAME kernel: trace-agent invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=1000

Jan 26 04:40:29 SERVER_NAME kernel: ghc invoked oom-killer: gfp_mask=0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), order=0, oom_score_adj=0

Jun 09 05:20:53 weo1 kernel: systemd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0

journalctl -r grep oom

See also

• OOM, EarlyOOM, OOM Killer, MemoryPressure (K8s), systemd-oomd, OOMKilled, oom-killer, memcpy, sar -r, Exit code: 137, Killed process