have a look here: http://www.rsyslog.com/doc/v8-stable/troubleshooting/troubleshoot.html#segmentation-faults
2016-12-01 17:19 GMT+01:00 Virili V. <viril...@gmail.com>: > Hi Rainer, have you any recommendations on how to have the backtrace? > > > 2016-12-01 15:42 GMT+00:00 Rainer Gerhards <rgerha...@hq.adiscon.com>: > >> sorry, I need the full log to make sense out of it. Also a backtrace >> would be useful. >> >> Warning: right now under heavy workload, can take some time until I >> can actually have a look. >> >> Rainer >> >> 2016-12-01 15:07 GMT+01:00 Virili V. <viril...@gmail.com>: >> > Hi all, >> > I am experiencing a segmentation fault when I start rsyslog on all my >> RHEL >> > 7.2 machines. The issue appears even if I use the default >> /etc/rsyslog.conf >> > file. >> > This is an extract of the debug file, is it enough to presume it might be >> > caused by cloud-init? >> > >> > >> > processBATCH: next msg 3: Registered Authentication Agent for >> > unix-process:3568:581351 (system bus name :1.56 [/usr/bin/pkttyagent >> > --notify-fd 5 --fallbac >> > 6748.170579422:main Q:Reg/w0 : PROPFILT >> > 6748.170587314:main Q:Reg/w0 : Property.: 'programname' >> > 6748.170595274:main Q:Reg/w0 : Operation: 'isequal' >> > 6748.170605626:main Q:Reg/w0 : Value....: 'cloud-init' >> > 6748.170614328:main Q:Reg/w0 : Filter: check for property 'programname' >> > (value 'polkitd') isequal 'cloud-init': FALSE >> > 6748.170620328:main Q:Reg/w0 : PROPFILT condition result is 0 >> > 6748.170623472:main Q:Reg/w0 : PRIFILT >> > '*.info;mail.none;authpriv.none;cron.none' >> > 6748.170631516:main Q:Reg/w0 : pmask: 7F 7F X 7F 7F 7F 7F 7F 7F >> X X >> > 7F 7F 7F 7F 7F 7F 7F 7F 7F 7F 7F 7F 7F 7F 7F >> > 6748.170704610:main Q:Reg/w0 : PRIFILT condition result is 0 >> > 6748.170707762:main Q:Reg/w0 : PRIFILT 'authpriv.*' >> > 6748.170715830:main Q:Reg/w0 : pmask: X X X X X X X X X X >> FF >> > X X X X X X X X X X X X X X X >> > 6748.170787303:main Q:Reg/w0 : PRIFILT condition result is 1 >> > 6748.170790543:main Q:Reg/w0 : ACTION 3 >> > [builtin:omfile:/var/log/secure] >> > 6748.170799093:main Q:Reg/w0 : executing action 3 >> > 6748.170802741:main Q:Reg/w0 : action 'action 3': called, logging to >> > builtin:omfile (susp 0/0, direct q 1) >> > 6748.170807772:main Q:Reg/w0 : action 'action 3': is transactional - >> > executing in commit phase >> > 6748.170811790:main Q:Reg/w0 : wti 0x7f7aed96f7c0: we need to create a >> new >> > action worker instance for action 3 >> > 6748.170816478:main Q:Reg/w0 : wti 0x7f7aed96f7c0: created action worker >> > instance 1 for action 3 >> > 6748.170820222:main Q:Reg/w0 : Action 3 transitioned to state: itx >> > 6748.170823767:main Q:Reg/w0 : action 'action 3': set suspended state >> to 0 >> > 6748.170827089:main Q:Reg/w0 : PRIFILT 'mail.*' >> > 6748.170835105:main Q:Reg/w0 : pmask: X X FF X X X X X X >> X X >> > X X X X X X X X X X X X X X X >> > 6748.170906501:main Q:Reg/w0 : PRIFILT condition result is 0 >> > 6748.170909719:main Q:Reg/w0 : PRIFILT 'cron.*' >> > 6748.170917659:main Q:Reg/w0 : pmask: X X X X X X X X X >> FF X >> > X X X X X X X X X X X X X X X >> > 6748.170988946:main Q:Reg/w0 : PRIFILT condition result is 0 >> > 6748.170992106:main Q:Reg/w0 : PRIFILT '*.emerg' >> > 6748.171000048:main Q:Reg/w0 : pmask: 1 1 1 1 1 1 1 1 1 >> 1 1 >> > 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 >> > 6748.171079189:main Q:Reg/w0 : PRIFILT condition result is 0 >> > 6748.171084508:main Q:Reg/w0 : PRIFILT 'uucp,news.crit' >> > 6748.171095202:main Q:Reg/w0 : pmask: X X X X X X X 7 7 >> X X >> > X X X X X X X X X X X X X X X >> > 6748.171180497:main Q:Reg/w0 : PRIFILT condition result is 0 >> > 6748.171192275:main Q:Reg/w0 : PRIFILT 'local7.*' >> > 6748.171200508:main Q:Reg/w0 : pmask: X X X X X X X X X >> X X >> > X X X X X X X X X X X X FF X X >> > 6748.171271918:main Q:Reg/w0 : PRIFILT condition result is 0 >> > 6748.171275654:main Q:Reg/w0 : processBATCH: next msg 4: rsyslogd[3547]: >> > segfault at 10 ip 00007f61485950af sp 00007ffd5b2e8350 error 4 in >> > imuxsock.so[7f6148592000+7000] >> > >> > >> > Thank you >> > V >> > _______________________________________________ >> > rsyslog mailing list >> > http://lists.adiscon.net/mailman/listinfo/rsyslog >> > http://www.rsyslog.com/professional-services/ >> > What's up with rsyslog? Follow https://twitter.com/rgerhards >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.