Thanks David! I noticed I actually killed it but I got running again with a new pid. I tried to strace the kill and it did it successfully. I saw the ps tree it depends on init.
I tried to stop it with /etc/init.d/rsyslog that calls: start-stop-daemon --stop --quiet --retry=TERM/30/KILL/15 --pidfile $PIDFILE --name $NAME but it did not work. Your solution works perfectly! Thanks. Xavi On 23 October 2015 at 15:09, David Lang <[email protected]> wrote: > On Fri, 23 Oct 2015, Xavier Fustero wrote: > > Hi, >> >> I noticed I can not terminate the rsyslog process in my Ubuntu.I am >> running: >> >> root@rsyslog:/home/test/cert# rsyslogd -v >> rsyslogd 8.13.0, compiled with: >> PLATFORM: x86_64-pc-linux-gnu >> PLATFORM (lsb_release -d): >> FEATURE_REGEXP: Yes >> GSSAPI Kerberos 5 support: No >> FEATURE_DEBUG (debug build, slow code): No >> 32bit Atomic operations supported: Yes >> 64bit Atomic operations supported: Yes >> memory allocator: system default >> Runtime Instrumentation (slow code): No >> uuid support: Yes >> Number of Bits in RainerScript integers: 64 >> >> See http://www.rsyslog.com for more information. >> >> on my Ubuntu: >> Distributor ID: Ubuntu >> Description: Ubuntu 14.04.3 LTS >> Release: 14.04 >> Codename: trusty >> >> and stop all monit processes and run /etc/init.d/rsyslogd stop but the >> process keeps running. I also try to kill it TERM, -9, remove its pid file >> but the file is alwasy recreated and the process running. >> >> root@rsyslog:/home/test/cert# /etc/init.d/rsyslog status >> * rsyslogd is running >> >> syslog 8816 0.0 0.1 599404 1960 ? Ssl 10:35 0:00 rsyslogd >> >> I tried on two different boxes and same behavior. How can I terminate it? >> > > when you kill it, you should see it running with a different PID because > the init system is monitoring it and restarts it. > > to tell init that you want it to stop you need to do > > service rsyslog stop > > David Lang > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

