[rsyslog-notify] Forum Thread: Rsyslog doesn't die when disk-assisted queue is full - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Tue Jan 21 19:50:48 CET 2014
User: deepeshreja
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24114#p24114
Message:
----------
Rsyslog doesn't die when disk-assisted queue is full and MaxDiskSpace is
reached.
I've just filed a bug <!-- m --><a class="postlink"
href="http://bugzilla.adiscon.com/show_bug.cgi?id=506">http://bugzilla.adiscon.com/show_bug.cgi?id=506</a><!--
m --> and thought of posting it here too so that it can get some attention.
I was testing rsyslog for some scenarios while forwarding logs to central
server using TCP and the host is down.
I filled up the Action Queue and it started using DA and that too I filled
up (did that using logger command, in loop). After this ActionQ started
dropping messages. As I kept on sending messages, MainQ got full and
started using DA.
The remote host was still down and I tried shutting down the rsyslog but it
didn't shut down.
I think as $ActionQueueMaxDiskSpace has reached, it couldn't flush the
messages in the memory queue to disk and hanged. Here is the relevant
config:
auth,authpriv.* /var/log/authlog
$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName auth1 # set file name, also enables disk mode
$ActionResumeRetryCount -1 # infinite retries on insert failure
$ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
$ActionQueueMaxFileSize 1m
$ActionQueueSize 100
$ActionQueueHighWaterMark 90
$ActionQueueLowWaterMark 80
$ActionQueueMaxDiskSpace 2m
$ActionQueueTimeoutShutdown 3000
& @@xyz:10514
$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName auth2 # set file name, also enables disk mode
$ActionResumeRetryCount -1 # infinite retries on insert failure
$ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
$ActionQueueMaxFileSize 1m
$ActionQueueSize 100
$ActionQueueHighWaterMark 90
$ActionQueueLowWaterMark 80
$ActionQueueMaxDiskSpace 2m
$ActionQueueTimeoutShutdown 3000
& @@abc:10514
I think we should patch it such that when it dies and there is no available
disk space, it should drop the messages without hanging.
More information about the rsyslog-notify
mailing list