[rsyslog-notify] Forum Thread: Rsyslog doesn't die when disk-assisted queue is full - (Mode 'post')

[noreply at adiscon.com]

User: deepeshreja 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24114#p24114

Message: 
----------
Rsyslog doesn't die when disk-assisted queue is full and MaxDiskSpace is
reached.

I've just filed a bug <!-- m --><a class="postlink"
href="http://bugzilla.adiscon.com/show_bug.cgi?id=506">http://bugzilla.adiscon.com/show_bug.cgi?id=506</a><!--
m --> and thought of posting it here too so that it can get some attention.

I was testing rsyslog for some scenarios while forwarding logs to central
server using TCP and the host is down.

I filled up the Action Queue and it started using DA and that too I filled
up (did that using logger command, in loop). After this ActionQ started
dropping messages. As I kept on sending messages, MainQ got full and
started using DA.

The remote host was still down and I tried shutting down the rsyslog but it
didn't shut down. 

I think as $ActionQueueMaxDiskSpace has reached, it couldn't flush the
messages in the memory queue to disk and hanged. Here is the relevant
config:

auth,authpriv.* /var/log/authlog
$ActionQueueType LinkedList   # use asynchronous processing
$ActionQueueFileName auth1 # set file name, also enables disk mode
$ActionResumeRetryCount -1    # infinite retries on insert failure
$ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
$ActionQueueMaxFileSize 1m 
$ActionQueueSize 100
$ActionQueueHighWaterMark 90
$ActionQueueLowWaterMark 80
$ActionQueueMaxDiskSpace 2m
$ActionQueueTimeoutShutdown 3000
& @@xyz:10514

$ActionQueueType LinkedList   # use asynchronous processing
$ActionQueueFileName auth2 # set file name, also enables disk mode
$ActionResumeRetryCount -1    # infinite retries on insert failure
$ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
$ActionQueueMaxFileSize 1m 
$ActionQueueSize 100
$ActionQueueHighWaterMark 90
$ActionQueueLowWaterMark 80
$ActionQueueMaxDiskSpace 2m
$ActionQueueTimeoutShutdown 3000
& @@abc:10514

I think we should patch it such that when it dies and there is no available
disk space, it should drop the messages without hanging.