Dear Rainer, I appreciate the time you took out for looking into this. Thanks a
ton. I think if nothing happens , this might be another option or an upgrade to
a new RHEL kernel
Again, thanks for all the help !! Rahul > From: [email protected]
> To: [email protected]
> Date: Mon, 28 Jan 2013 12:09:49 +0000
> Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only
>
> Mhhh... I think I give up. The systems seems to behave extremly strange, it's
> again jsut the rsyslog debug log. There are so many strange things on that
> system. Have considered installing a test system from scratch and checking if
> all works well, there?
> Rainer
>
> > -----Original Message-----
> > From: [email protected] [mailto:rsyslog-
> > [email protected]] On Behalf Of Rahul Bhat
> > Sent: Monday, January 28, 2013 12:59 PM
> > To: [email protected]
> > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only
> >
> >
> > > Unfortunately, this did not work, it's just the rsyslog log. I also need
> > > all BUT
> > write, that's !write not write ;) Looks like there was an escape missing:
> > >
> > > $ strace -ttt -T -e trace=\!write -f rsyslogd -nd > rsyslog_strace.log
> > Ok here you go with the new logs , Hope this is what you were looking for.
> > > From: [email protected]
> > > To: [email protected]
> > > Date: Mon, 28 Jan 2013 11:26:31 +0000
> > > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: [email protected] [mailto:rsyslog-
> > > > [email protected]] On Behalf Of Rahul Bhat
> > > > Sent: Monday, January 28, 2013 12:22 PM
> > > > To: [email protected]
> > > > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only
> > > >
> > > >
> > > > Sorry, I should have mentioned, it's a bit tricky so that the debug
> > > > system does not get into our way:
> > > > > >
> > > > > > $ export RSYSLOG_DEBUG="nologtimestamp"
> > > > > > $ strace -ttt -T -e trace=!write -f rsyslogd -nd .... > logfile
> > > > > > : with root
> > > > permission , I cannot find the command working .Any other alternative ?
> > > > >
> > > > > strace -ttt -T -e trace=!write -f rsyslogd -nd > rsyslog_strace.log
> > > > > Dear
> > > > Rainer , it finally worked.attched is the log file.
> > > > strace -ttt -T -e trace=write -f
> > > > rsyslogd -nd > rsyslog_strace.log
> > >
> > > Unfortunately, this did not work, it's just the rsyslog log. I also need
> > > all BUT
> > write, that's !write not write ;) Looks like there was an escape missing:
> > >
> > > $ strace -ttt -T -e trace=\!write -f rsyslogd -nd > rsyslog_strace.log
> > >
> > > Rainer
> > >
> > > >
> > > >
> > > > > From: [email protected]
> > > > > To: [email protected]
> > > > > Date: Mon, 28 Jan 2013 11:21:10 +0100
> > > > > Subject: Re: [rsyslog] Hi - Rsyslog run in debug mode only
> > > > >
> > > > >
> > > > >
> > > > > >
> > > > > > > > I just did, but I have to admit it looks rather strange.
> > > > > > > > Could you create a
> > > > > > > combined debug log & strace so that I can see what is issued
> > > > > > > in the case it works. I'd like to see the difference. Sorry
> > > > > > > for my ignorance , but what do you mean " create a combined
> > > > > > > debug log &
> > > > strace "How can I do this ?
> > > > > >
> > > > > > Sorry, I should have mentioned, it's a bit tricky so that the
> > > > > > debug system
> > > > does not get into our way:
> > > > > >
> > > > > > $ export RSYSLOG_DEBUG="nologtimestamp"
> > > > > > $ strace -ttt -T -e trace=!write -f rsyslogd -nd .... > logfile
> > > > > > : with root
> > > > permission , I cannot find the command working .Any other alternative ?
> > > > >
> > > > > strace -ttt -T -e trace=!write -f rsyslogd -nd >
> > > > > rsyslog_strace.log
> > > > >
> > > > > bash:
> > > > > !write: event not found
> > > > >
> > > > >
> > > > > >
> > > > > > Rainer
> > > > > > _______________________________________________
> > > > > > rsyslog mailing list
> > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > > > > http://www.rsyslog.com/professional-services/
> > > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > > > > > NOTE
> > > > > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> > > > > > myriad of sites
> > > > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> > DON'T
> > > > LIKE THAT.
> > > > >
> > > > > _______________________________________________
> > > > > rsyslog mailing list
> > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > > > http://www.rsyslog.com/professional-services/
> > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
> > > > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> > > > > myriad of sites
> > > > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> > DON'T
> > > > LIKE THAT.
> > > >
> > > _______________________________________________
> > > rsyslog mailing list
> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > http://www.rsyslog.com/professional-services/
> > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
> > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> > > sites
> > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> > LIKE THAT.
> >
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.