Function peak_rss_bytes 

pub fn peak_rss_bytes() -> u64

This process’s peak resident set (VmHWM off /proc/self/status) in bytes, or 0 when unreadable. The audit line carries it: on the appliance the server is PID 1, so its high-water mark is the box’s.