On Mon, 23 Sep 2013, John P. Rouillard wrote:
In message <[email protected]>,
David Lang writes:
On 09/19/2013 06:16 AM, David Lang wrote:
I've started running SEC from rsyslog via omprog and it's
running, but when it tries to write the dumpfile, nothing
happens.
I did a cut-n-paste of the command line (as shown in ps) and
ran it from the command line and from there it does create
the dump file. the dump files are set to be written to /var/tmp
Eric, please try this.
Try this:
$ sh
$ trap '' USR1
$ sec (cut and paste of command line mentioned above)
$ kill -USR1 <sec PID>
$ exit
I have a sneaking suspicion that something in SEC/perl isn't restoring
the signal handler if it's set to ignore in the parent process. What
the sequence above should do it ignore USR1 in the shell. Then you
test the SEC USR1 signal handiling.
SEC uses the $SIG{} array to set the signal handlers, I am not sure if
the POSIX::sigaction stuff operates differently or is $SIG{} is
sigaction under the hood..
enabling the log file shows ongoing activity, but it does not show anything
when the USR1 is sent to the pid.
That's telling me that USR1 is being ignored somewhere in the process
chain. Can you confirm/deny that USR1 is ignored by the signal
handling in rsyslog?
Rainer said:
I just checked, and omprog already resets the signal handlers. So this
cannot be the problem...
David Lang
P.S. this is going to be more interesting to figure out since today was my last
day at this job. This is an interesting challenge, so I'm still going the help
the guys who are still there, but I no longer have direct access to things
there.
I need to try and duplicate this problem on the Ubuntu machines I do have access
to, but it will take me a couple days to get time to do so, so if Eric can check
on the RHEL systems we can keep making progress.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
