FWIW, we have an Ubuntu test receiver configured to use the latest nightly development builds and more days than not it has the same issue. We have Nagios setup to regularly probe the ports on the box and it is usually the imrelp port probes that result in the condition.
Since the update to 8.1908.0~20190709150537-0adiscon1xenial we've not (yet) seen the problem reoccur. That said, we've not upgraded our main receivers to 8.1907 yet and haven't had a lot of time to closely monitor the specifics of the logging failures on the test node in recent weeks, so I understand that this feedback is of limited value. -----Original Message----- From: rsyslog <[email protected]> On Behalf Of Heaton, Tobias via rsyslog Sent: Wednesday, July 10, 2019 7:35 AM To: rsyslog-users <[email protected]> Cc: Heaton, Tobias <[email protected]> Subject: Re: [rsyslog] 8.1905.0 Logging Stops Importance: High I updated my RHEL6 boxes to rsyslog 8.1907.0 at 7:27am this morning and at 8:07am, logging stopped just as before. Rolling back to 8.1904.0 and so far, so good. -----Original Message----- From: rsyslog <[email protected]> On Behalf Of David Lang via rsyslog Sent: Tuesday, July 9, 2019 1:52 PM To: Li, Mike via rsyslog <[email protected]> Cc: David Lang <[email protected]> Subject: Re: [rsyslog] 8.1905.0 Logging Stops Caution - External Email;;; ******************************************************************************************************************************************** there are 8.1907 packages for centos in the adiscon repo, but it looks like the OBS repo built 8.1905 in July instead of 8.1907 David Lang On Tue, 9 Jul 2019, Li, Mike via rsyslog wrote: > Date: Tue, 9 Jul 2019 13:35:29 +0000 > From: "Li, Mike via rsyslog" <[email protected]> > To: rsyslog-users <[email protected]>, > Rainer Gerhards <[email protected]> > Cc: "Li, Mike" <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > Hi Rainer, > I'm also experiencing similar logging stopping issue on AWS Linux 2018.03 > when would fix in > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_rsyslog_rsyslog_issues_3686&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=lDNfB6yzWn9mIeLe13n59qDGZyKDBsH254e8pj476mM&e= > be made available for RHEL06 ? > Thanks. > Mike > -----Original Message----- > From: rsyslog <[email protected]> On Behalf Of Heaton, Tobias > via rsyslog > Sent: Tuesday, July 9, 2019 8:41 AM > To: rsyslog-users <[email protected]>; Rainer Gerhards > <[email protected]> > Cc: Heaton, Tobias <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > EXTERNAL: Verify sender before opening attachments or links. > > Bumping this thread - still seeing 8.1905.0-2.el6 for RHEL6, which still > causes rsyslog to fail. > > Is there any update on when RedHat will have the updated code? > > -----Original Message----- > From: rsyslog <[email protected]> On Behalf Of Heaton, Tobias > via rsyslog > Sent: Thursday, June 27, 2019 9:03 AM > To: Rainer Gerhards <[email protected]> > Cc: Heaton, Tobias <[email protected]>; rsyslog-users > <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > I've been following the thread at > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_rsyslog_rsyslog_issues_3686&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=xweK2GTzEkqcrBBZIJq3bnF0uiFtOepUAno-jOYzTu8&s=Rhk0gSd_i0S7JJbXgQv8IxckTRylqq94K5ypZhg1tgc&e= > . > > I upgraded rsyslog on my RHEL6 host and after about 20 minutes, logging again > stops. > > Has the aforementioned patch not yet been released for RedHat/yum? > > -----Original Message----- > From: Heaton, Tobias > Sent: Thursday, June 13, 2019 1:05 PM > To: Rainer Gerhards <[email protected]> > Cc: Michael Biebl <[email protected]>; rsyslog-users > <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > Looking at the aforementioned link, my config is considerably simpler. I did > read about the suggested bump to the devel release, but given our syslog > server is production I hesitate to continue testing and risk further loss of > data. > >> On Jun 12, 2019, at 6:49 AM, Rainer Gerhards <[email protected]> >> wrote: >> >> Caution - External Email;;; >> >> ********************************************************************** >> ********************************************************************** >> FYI: I guess this thread here is a duplicate of >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_rsyslo >> g_rsyslog_issues_3686&d=DwIFaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaL >> sgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=S3Rb53yyV69wLOmt0FRCSHHGXxB8GD7vZAdn >> CB7qtYo&s=kstKSKXQNf__Rvz2xQVW5tWJfOyx-yNejVXfraa7SxY&e= >> >> Knowing the full config would be useful. Can be created via >> >> $ rsyslogd -f /etc/rsyslog.conf -o /tmp/full_rsyslog_conf >> >> where -f should point to the main config file and the file pointed to >> by -o contains the full config. Post the latter. >> >> Rainer >> >> El mié., 12 jun. 2019 a las 10:48, Rainer Gerhards >> (<[email protected]>) escribió: >>> >>>> El mar., 11 jun. 2019 a las 20:16, Michael Biebl (<[email protected]>) >>>> escribió: >>>> If the problem is reliably reproducible (which seems to be on >>>> affected systems), maybe a git bisect would actually be the quickest >>>> way to find the commit causing this. >>> >>> Good point! >>> >>> @tobias: can you build from source? >>> >>> If not, we could work with git bisect and custom packages, but that >>> looks very time-consuming. >>> >>> Rainer > _______________________________________________ > rsyslog mailing list > https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=xweK2GTzEkqcrBBZIJq3bnF0uiFtOepUAno-jOYzTu8&s=eCE_uw1iz27utOr31oN-0_3M4_4L8Kfe4WebMYOuy1o&e= > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerhards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=xweK2GTzEkqcrBBZIJq3bnF0uiFtOepUAno-jOYzTu8&s=X2Jy3MZhZvUU2y8SREXpuYme4VAi3hEn2FDlEfdNt6E&e= > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ > rsyslog mailing list > https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=NcjAJ2Kf_t5sCfkgLq55TKYlm8NXDcnqo82J3ivgRJ8&e= > > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerhards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=hkiSFmPxD44uanS98WxuE34ktlghA-EI5XW3jB23l6k&e= > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > > Confidentiality Notice:: This email, including attachments, may include > non-public, proprietary, confidential or legally privileged information. If > you are not an intended recipient or an authorized agent of an intended > recipient, you are hereby notified that any dissemination, distribution or > copying of the information contained in or transmitted with this e-mail is > unauthorized and strictly prohibited. If you have received this email in > error, please notify the sender by replying to this message and permanently > delete this e-mail, its attachments, and any copies of it immediately. You > should not retain, copy or use this e-mail or any attachment for any purpose, > nor disclose all or any part of the contents to any other person. Thank you. > _______________________________________________ > rsyslog mailing list > https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=NcjAJ2Kf_t5sCfkgLq55TKYlm8NXDcnqo82J3ivgRJ8&e= > > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerhards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=hkiSFmPxD44uanS98WxuE34ktlghA-EI5XW3jB23l6k&e= > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=NcjAJ2Kf_t5sCfkgLq55TKYlm8NXDcnqo82J3ivgRJ8&e= http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerhards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=hkiSFmPxD44uanS98WxuE34ktlghA-EI5XW3jB23l6k&e= NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
