I'm also seeing more of the segfault messages in 1907 and restarts of rsyslogd [455973.614327] rs:main Q:Reg[31261]: segfault at 0 ip (null) sp 00007fc7d7ffea48 error 14 in rsyslogd[55c41427f000+a0000] [459113.551029] rs:main Q:Reg[2193]: segfault at 0 ip (null) sp 00007fd4aade7a48 error 14 in rsyslogd[556d32a70000+a0000] [501789.568177] rs:main Q:Reg[18096]: segfault at 0 ip (null) sp 00007f0e3bffea48 error 14 in rsyslogd[55c3fdcee000+a0000] [502288.762233] rs:main Q:Reg[27491]: segfault at 0 ip (null) sp 00007fda17ffea48 error 14 in rsyslogd[560a70a46000+a0000] [515018.787635] traps: rs:main Q:Reg[29669] general protection ip:7f9049967310 sp:7f902fbde8d8 error:0 in libc-2.17.so[7f904980e000+1c2000] [516723.736981] traps: rs:main Q:Reg[660] general protection ip:7f0435de3310 sp:7f041bffe8d8 error:0 in libc-2.17.so[7f0435c8a000+1c2000] [517408.745655] rs:main Q:Reg[2854]: segfault at a203065 ip 0000555ff5641781 sp 00007f324fbfda30 error 4 in rsyslogd[555ff55ee000+a0000] [613874.114663] rs:main Q:Reg[25493]: segfault at 7f0d38021cb8 ip 00007f0d61d1c10e sp 00007f0d435e9a20 error 4 in libpthread-2.17.so[7f0d61d0c000+17000]
Reverted back to 1904 also. Thanks. Mike -----Original Message----- From: rsyslog <[email protected]> On Behalf Of Heaton, Tobias via rsyslog Sent: Wednesday, July 10, 2019 8:35 AM To: rsyslog-users <[email protected]> Cc: Heaton, Tobias <[email protected]> Subject: Re: [rsyslog] 8.1905.0 Logging Stops Importance: High EXTERNAL: Verify sender before opening attachments or links. I updated my RHEL6 boxes to rsyslog 8.1907.0 at 7:27am this morning and at 8:07am, logging stopped just as before. Rolling back to 8.1904.0 and so far, so good. -----Original Message----- From: rsyslog <[email protected]> On Behalf Of David Lang via rsyslog Sent: Tuesday, July 9, 2019 1:52 PM To: Li, Mike via rsyslog <[email protected]> Cc: David Lang <[email protected]> Subject: Re: [rsyslog] 8.1905.0 Logging Stops Caution - External Email;;; ******************************************************************************************************************************************** there are 8.1907 packages for centos in the adiscon repo, but it looks like the OBS repo built 8.1905 in July instead of 8.1907 David Lang On Tue, 9 Jul 2019, Li, Mike via rsyslog wrote: > Date: Tue, 9 Jul 2019 13:35:29 +0000 > From: "Li, Mike via rsyslog" <[email protected]> > To: rsyslog-users <[email protected]>, > Rainer Gerhards <[email protected]> > Cc: "Li, Mike" <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > Hi Rainer, > I'm also experiencing similar logging stopping issue on AWS Linux 2018.03 > when would fix in > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_rsyslog_rsyslog_issues_3686&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=lDNfB6yzWn9mIeLe13n59qDGZyKDBsH254e8pj476mM&e= > be made available for RHEL06 ? > Thanks. > Mike > -----Original Message----- > From: rsyslog <[email protected]> On Behalf Of Heaton, > Tobias via rsyslog > Sent: Tuesday, July 9, 2019 8:41 AM > To: rsyslog-users <[email protected]>; Rainer Gerhards > <[email protected]> > Cc: Heaton, Tobias <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > EXTERNAL: Verify sender before opening attachments or links. > > Bumping this thread - still seeing 8.1905.0-2.el6 for RHEL6, which still > causes rsyslog to fail. > > Is there any update on when RedHat will have the updated code? > > -----Original Message----- > From: rsyslog <[email protected]> On Behalf Of Heaton, > Tobias via rsyslog > Sent: Thursday, June 27, 2019 9:03 AM > To: Rainer Gerhards <[email protected]> > Cc: Heaton, Tobias <[email protected]>; rsyslog-users > <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > I've been following the thread at > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_rsyslog_rsyslog_issues_3686&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=xweK2GTzEkqcrBBZIJq3bnF0uiFtOepUAno-jOYzTu8&s=Rhk0gSd_i0S7JJbXgQv8IxckTRylqq94K5ypZhg1tgc&e= > . > > I upgraded rsyslog on my RHEL6 host and after about 20 minutes, logging again > stops. > > Has the aforementioned patch not yet been released for RedHat/yum? > > -----Original Message----- > From: Heaton, Tobias > Sent: Thursday, June 13, 2019 1:05 PM > To: Rainer Gerhards <[email protected]> > Cc: Michael Biebl <[email protected]>; rsyslog-users > <[email protected]> > Subject: Re: [rsyslog] 8.1905.0 Logging Stops > > Looking at the aforementioned link, my config is considerably simpler. I did > read about the suggested bump to the devel release, but given our syslog > server is production I hesitate to continue testing and risk further loss of > data. > >> On Jun 12, 2019, at 6:49 AM, Rainer Gerhards <[email protected]> >> wrote: >> >> Caution - External Email;;; >> >> ********************************************************************* >> * >> ********************************************************************* >> * >> FYI: I guess this thread here is a duplicate of >> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_rsysl >> o >> g_rsyslog_issues_3686&d=DwIFaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBa >> L >> sgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=S3Rb53yyV69wLOmt0FRCSHHGXxB8GD7vZAd >> n CB7qtYo&s=kstKSKXQNf__Rvz2xQVW5tWJfOyx-yNejVXfraa7SxY&e= >> >> Knowing the full config would be useful. Can be created via >> >> $ rsyslogd -f /etc/rsyslog.conf -o /tmp/full_rsyslog_conf >> >> where -f should point to the main config file and the file pointed to >> by -o contains the full config. Post the latter. >> >> Rainer >> >> El mié., 12 jun. 2019 a las 10:48, Rainer Gerhards >> (<[email protected]>) escribió: >>> >>>> El mar., 11 jun. 2019 a las 20:16, Michael Biebl (<[email protected]>) >>>> escribió: >>>> If the problem is reliably reproducible (which seems to be on >>>> affected systems), maybe a git bisect would actually be the >>>> quickest way to find the commit causing this. >>> >>> Good point! >>> >>> @tobias: can you build from source? >>> >>> If not, we could work with git bisect and custom packages, but that >>> looks very time-consuming. >>> >>> Rainer > _______________________________________________ > rsyslog mailing list > https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_ > mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cw > BaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=xweK2GTzEkqcrBBZIJq3bnF0uiFtOepUA > no-jOYzTu8&s=eCE_uw1iz27utOr31oN-0_3M4_4L8Kfe4WebMYOuy1o&e= > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerh > ards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EU > vddO5r7UxzqP5s&m=xweK2GTzEkqcrBBZIJq3bnF0uiFtOepUAno-jOYzTu8&s=X2Jy3MZ > hZvUU2y8SREXpuYme4VAi3hEn2FDlEfdNt6E&e= > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ > rsyslog mailing list > https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_ > mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cw > BaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982j > k-DMJvZ2Ro&s=NcjAJ2Kf_t5sCfkgLq55TKYlm8NXDcnqo82J3ivgRJ8&e= > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerhards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=hkiSFmPxD44uanS98WxuE34ktlghA-EI5XW3jB23l6k&e= > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > > Confidentiality Notice:: This email, including attachments, may include > non-public, proprietary, confidential or legally privileged information. If > you are not an intended recipient or an authorized agent of an intended > recipient, you are hereby notified that any dissemination, distribution or > copying of the information contained in or transmitted with this e-mail is > unauthorized and strictly prohibited. If you have received this email in > error, please notify the sender by replying to this message and permanently > delete this e-mail, its attachments, and any copies of it immediately. You > should not retain, copy or use this e-mail or any attachment for any purpose, > nor disclose all or any part of the contents to any other person. Thank you. > _______________________________________________ > rsyslog mailing list > https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_ > mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cw > BaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982j > k-DMJvZ2Ro&s=NcjAJ2Kf_t5sCfkgLq55TKYlm8NXDcnqo82J3ivgRJ8&e= > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow > https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerh > ards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EU > vddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=hkiSFmP > xD44uanS98WxuE34ktlghA-EI5XW3jB23l6k&e= > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.adiscon.net_mailman_listinfo_rsyslog&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=NcjAJ2Kf_t5sCfkgLq55TKYlm8NXDcnqo82J3ivgRJ8&e= http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_rgerhards&d=DwIGaQ&c=c6MrceVCY5m5A_KAUkrdoA&r=Gev2oD_cwBaLsgGrQ_lnBXqGXR9EUvddO5r7UxzqP5s&m=-vr4j0BXX9DOYxocIscwHayDvQ2Xx982jk-DMJvZ2Ro&s=hkiSFmPxD44uanS98WxuE34ktlghA-EI5XW3jB23l6k&e= NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

