Rainer, still same situation:

Local time: Tue Mar  6 13:52:41 EET 2018

[root@all-logs centos]# systemctl status rsyslog
● rsyslog.service - System Logging Service
   Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; disabled; vendor 
preset: enabled)
   Active: active (running) since Tue 2018-03-06 11:26:32 EET; 2h 20min ago
     Docs: man:rsyslogd(8)
           http://www.rsyslog.com/doc/
 Main PID: 4708 (rsyslogd)
   CGroup: /system.slice/rsyslog.service
           └─4708 /usr/sbin/rsyslogd -n -iNONE

Mar 06 13:42:39 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:43:09 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:43:39 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:44:09 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:44:39 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:45:09 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:45:39 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:46:09 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:46:39 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
Mar 06 13:47:09 all-logs.local rsyslogd[4708]: omelasticsearch: checkConn 
failed after 1 attempts. [v8.33.0 try http://www.rsyslog.com/e/2007 ]
[root@all-logs centos]#

Received:
Mar  6 11:27:11 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1217
Mar  6 11:27:14 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1218
Mar  6 11:27:17 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1219
Mar  6 11:27:20 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1220
Mar  6 11:27:23 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1221
Mar  6 11:27:26 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1222
Mar  6 11:27:29 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1223
Mar  6 11:27:32 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST Message 
to be written 1224

And last message number currently sent to server is:
TEST Message to be written 4058
TEST Message to be written 4059

Versions:
[root@all-logs centos]# rsyslogd -v
rsyslogd 8.33.0, compiled with:
        PLATFORM:                               x86_64-redhat-linux-gnu
        PLATFORM (lsb_release -d):
        FEATURE_REGEXP:                         Yes
        GSSAPI Kerberos 5 support:              Yes
        FEATURE_DEBUG (debug build, slow code): No
        32bit Atomic operations supported:      Yes
        64bit Atomic operations supported:      Yes
        memory allocator:                       system default
        Runtime Instrumentation (slow code):    No
        uuid support:                           Yes
        systemd support:                        Yes
        Number of Bits in RainerScript integers: 64

See http://www.rsyslog.com for more information.
[root@all-logs centos]# yum repolist
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror.vpsnet.com
 * epel: mirrors.colocall.net
 * extras: mirror.vpsnet.com
 * updates: mirror.vpsnet.com
repo id                                                       repo name         
                                                                        status
base/7/x86_64                                                 CentOS-7 - Base   
                                                                         9,591
epel/x86_64                                                   Extra Packages 
for Enterprise Linux 7 - x86_64                                            
12,358
extras/7/x86_64                                               CentOS-7 - Extras 
                                                                           392
rsyslog_v8/7/x86_64                                           Adiscon CentOS-7 
- local packages for x86_64                                               1,519
updates/7/x86_64                                              CentOS-7 - 
Updates                                                                         
1,962
repolist: 25,822
[root@all-logs centos]#




-----Original Message-----
From: Ruslanas Gžibovskis 
Sent: Tuesday, March 6, 2018 11:28 AM
To: rsyslog-users <rsyslog@lists.adiscon.com>
Subject: RE: [rsyslog] rsyslog-server stops receiving messages after 30 sec

Found: http://www.rsyslog.com/rhelcentos-rpms/  updated, doing same check.



-----Original Message-----
From: rsyslog [mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of Ruslanas 
Gžibovskis
Sent: Tuesday, March 6, 2018 11:23 AM
To: Rainer Gerhards <rgerha...@hq.adiscon.com>; rsyslog-users 
<rsyslog@lists.adiscon.com>
Subject: Re: [rsyslog] rsyslog-server stops receiving messages after 30 sec



Hm, need to check with CentOS 😊 and RHEL 😊

Ok, thanks for support.

-----Original Message-----
From: Rainer Gerhards [mailto:rgerha...@hq.adiscon.com]
Sent: Tuesday, March 6, 2018 11:20 AM
To: rsyslog-users <rsyslog@lists.adiscon.com>
Cc: Ruslanas Gžibovskis <ruslanas.gzibovs...@telia.lt>
Subject: Re: [rsyslog] rsyslog-server stops receiving messages after 30 sec

TBH, I won't look any further at this until you run 8.33.0 ;-) It doesn't help 
to debug ever and ever again old bugs...

Raienr

2018-03-06 9:57 GMT+01:00 Ruslanas Gžibovskis <rusla...@lpic.lt>:
> I will check if missed, at the moment I found rsyslog sprpped (logs 
> are mising of course :) )
>
> At the moment I have executed: ]# i=0; while true ; do logger -n IP -P
> 514 -t TESTAS -p mail.info "TEST Message to be written $i" ; echo $i ;
> i=$((i+1)) ; sleep 3; done
>
> and now it is 10:56 my time
>
> and last logs I see:
>
> Mar  6 10:27:26 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info TEST 
> Message to be written 23 Mar  6 10:27:29 10.94.0.131[10.94.0.131]
> TESTAS: TESTAS mail.info  TEST Message to be written 24 Mar  6
> 10:27:32 10.94.0.131[10.94.0.131] TESTAS: TESTAS mail.info  TEST 
> Message to be written 25
>
> and cycle now says :
> 612
> 613
> 614
> 615
> 616
>
> will check after lunch, what will be written to log...
>
> On Tue, 6 Mar 2018 at 09:37 Rainer Gerhards <rgerha...@hq.adiscon.com>
> wrote:
>
>> This strongly reminds me on an old bug where flush did not work properly...
>>
>> Rainer
>>
>> 2018-03-06 3:14 GMT+01:00 David Lang <da...@lang.hm>:
>> > are any logs lost? or is it just that they are getting written in bursts?
>> >
>> > Davdi Lang
>> >
>> > _______________________________________________
>> > rsyslog mailing list
>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>> > http://www.rsyslog.com/professional-services/
>> > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
>> > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> of
>> > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you 
>> > DON'T LIKE THAT.
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
>> WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad 
>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if 
>> you DON'T LIKE THAT.
>>
> --
>
> Ruslanas Gžibovskis
> +370 6030 7030
> RHCE: 130-192-255
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
> WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites 
> beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is 
a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our 
control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to