[rsyslog-notify] Forum Thread: shutting down rsyslogd - (Mode 'post')

[noreply at adiscon.com]

User: atticus 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26688#p26688

Message: 
----------
I am attempting to run some debug with the form rsyslogd -dn but before I
do that I want to stop the existing process as I understand this syntax
will run it's own instance for rsyslogd.  in fact, the debug run ended with

"rsyslogd: pidfile '/var/run/rsyslogd.pid' and pid 89875 already exist"

However, it seems that when I stop it it immediately restarts itself. the
command that's being restarted is simply rsyslogd -n 

 Does anyone have any thoughts on where to look see why it's doing this? 
Maybe what is syslog.socket, and how does it control autorestart?
Thanks in advance for your thoughts/comments.

Console output

/etc/rsyslog.d # service rsyslog stop
Warning: Stopping rsyslog.service, but it can still be activated by:
  syslog.socket
/etc/rsyslog.d # service rsyslog status
rsyslog.service - System Logging Service
   Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled)
   Active: active (running) since Fri 2016-07-01 14:58:21 PDT; 9s ago
  Process: 87380 ExecReload=/bin/kill -HUP $MAINPID (code=exited,
status=0/SUCCESS)
  Process: 89899 ExecStartPre=/usr/sbin/rsyslog-service-prepare
(code=exited, status=0/SUCCESS)
 Main PID: 89901 (rsyslogd)
   CGroup: /system.slice/rsyslog.service
           └─89901 /usr/sbin/rsyslogd -n

Jul 01 14:58:21 Linux systemd[1]: Starting System Logging Service...
Jul 01 14:58:21 Linux systemd[1]: Started System Logging Service.