[rsyslog] High cpu usage - rsyslog 5.4.0.

[Rainer Gerhards]

I managed to merge the v4 changes into v5-stable. Can you pull from it's git
head (git.adiscon.com/git/rsyslog.gig) and check if it works? Or do you need
a release tarball.

Note that I need to finally fix an issue in v4 before (the released version
has an interim/work-around fix) before I can take up more work on v5, but
chances are not too bad that the issue is fixed.

The master branch will receive the new patches ASAP, but that merge is a
little bit more complicated.

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Rainer Gerhards
> Sent: Monday, March 29, 2010 7:11 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] High cpu usage - rsyslog 5.4.0.
> 
> Hi,
> 
> thanks for the information. I have crafted a big patch package for v4
> the
> last two weeks. I will try to merge it in to v5 this week (I guess this
> will
> be a bit harder than usual). It may fix the issue.
> 
> If you have a moment or two, it would be interesting to know if 5.5.2
> has the
> same problem.
> 
> Rainer
> 
> > -----Original Message-----
> > From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> > bounces at lists.adiscon.com] On Behalf Of Ralph Crongeyer
> > Sent: Sunday, March 28, 2010 6:45 PM
> > To: rsyslog-users
> > Subject: Re: [rsyslog] High cpu usage - rsyslog 5.4.0.
> >
> > It's confirmed!
> >
> > I've been running for over an hour and a half now and:
> > load average: 0.06, 0.06, 0.02
> >
> > Looks good so far.
> >
> > Let me know if you guys (Michael, Rainer) want me to run in debug
> mode
> > without the lines commented out to see if I can catch the problem for
> > more troubleshooting.
> >
> > Thanks,
> > Ralph
> >
> > Ralph Crongeyer wrote:
> > > Ok,
> > > I stoped rsyslog apt-get removed the 5.3.7 package, installed the
> > 5.4.0
> > > package:
> > >
> > > root at logs:/opt# aptitude show rsyslog
> > > Package: rsyslog
> > > State: installed
> > > Automatically installed: no
> > > Version: 5.4.0-1
> > > Priority: extra
> > > Section: extra
> > > Maintainer: ralph at crongeyer.com
> > > Uncompressed Size: 3047k
> > > Depends: libc6 (>= 2.7-1), zlib1g (>= 1:1.1.4), lsb-base (>= 3.2-
> 14)
> > > Description: enhanced multi-threaded syslogd
> > >
> > > commented out the lines from rsyslog.conf:
> > > #daemon.*;mail.*;\
> > > #       news.err;\
> > > #       *.=debug;*.=info;\
> > > #       *.=notice;*.=warn       |/dev/xconsole
> > >
> > >
> > > and restarted rsyslog:
> > > root at logs:/opt# /etc/init.d/rsyslog restart
> > > Stopping enhanced syslogd: rsyslogd.
> > > Starting enhanced syslogd: rsyslogd.
> > >
> > > I'll get back to you in about an hour.
> > >
> > > Thanks,
> > > Ralph
> > >
> > > Michael Biebl wrote:
> > >
> > >> 2010/3/28 Ralph Crongeyer <ralph at crongeyer.com>:
> > >>
> > >>
> > >>> I'm running Debian Lenny on both machines.
> > >>>
> > >>>
> > >>
> > >>
> > >>> Is anyone else seeing high cpu loads with 5.4.0?
> > >>>
> > >>>
> > >>>
> > >> I can confirm his (on Debian unstable) and already notified Rainer
> > >> about this particular issue.
> > >> Some preliminary testing here seems to indicate it's an issue with
> > pipes.
> > >>
> > >> When I removed
> > >> daemon.*;mail.*;\
> > >>  news.err;\
> > >>  *.=debug;*.=info;\
> > >>  *.=notice;*.=warn      |/dev/xconsole
> > >>
> > >> from my rsyslog.conf, I could no longer reproduce the problem.
> > >>
> > >> Would be interesting to know, if you can confirm this.
> > >>
> > >> Cheers,
> > >> Michael
> > >>
> > >>
> > >>
> > >
> > >
> > >
> >
> >
> > --
> > Reminds me of my expedition into the wilds of Afghanistan. We lost
> our
> > corkscrew and were compelled to live on food and water for several
> > days. -
> > WC Fields
> >
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com