[rsyslog-notify] Forum Thread: rsyslog-7.4.4: using imklog+ompgsql causes 100% CPU usage - (Mode 'post')

[noreply at adiscon.com]

User: chrisk 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24285#p24285

Message: 
----------
Hi,

With rsyslog-7.4.4 on Debian, using a combination of imklog and ompgsql
results in a 100% CPU load as soon as something gets written to the kernel
log. Furthermore, the following message is continuously spammed to kern.*:

   [code:g7vveavh] rsyslogd: imklog: error reading kernel log -
shutting down: Bad file descriptor[/code:g7vveavh]

I can successfully reproduce this problem, on different systems, by running
rsyslogd with the following minimal config and then triggering a write to
the kernel log, for example by plugging in a USB stick:

[code:g7vveavh]
$ModLoad imuxsock
$ModLoad imklog

*.*;kern.none   /tmp/kern.none.log
# "Bad file descriptor" messages get spammed to this
kern.*          /tmp/kern.log

$ModLoad ompgsql
*.* :ompgsql:HOST,USER,DB,PASS
[/code:g7vveavh]

I don't know why it should make a difference, but in any case: the Postgres
database I'm connecting to with  ompgsql is connecting to is a remote one
(TCP).

Can anyone reproduce this on a non-Debian system?

Christian