Package: rsyslog Version: 5.8.11-2 Severity: important Tags: patch Hi,
There is a bug in rsyslog where a filled-up disk-assisted queue causes rsyslog to abort. We are using the following configuration for remote logging: ----- ModLoad omrelp # Create a DA In-Memory action queue for remote logging over TCP $WorkDirectory /var/spool/rsyslog $ActionQueueType LinkedList $ActionQueueFileName relpqueue # Restrict queue size to 10k entries $ActionQueueSize 10000 # Keep only 2.5k entries in memory $ActionQueueHighWatermark 2500 $ActionQueueLowWatermark 2300 # Write up to 10M of messages in the hard disk $ActionQueueMaxDiskSpace 10000k # Retry indefinitely $ActionResumeRetryCount -1 # Discard messages if queue is full $ActionQueueTimeoutEnqueue 0 # Save queue contents on shutdown $ActionQueueSaveOnShutdown on # Log over RELP *.* :omrelp:syslog.example.com:20514 ----- On a machine that can't reach syslog.example.com, rsyslogd eventually crashes leaving 10 MB ($ActionQueueMaxDiskSpace) worth of queue files behind. Nothing is visible in the system log, but the last thing written in the queue files is: rsyslogd: pthread_mutex_lock.c:62: __pthread_mutex_lock: Assertion `mutex->__data.__owner == 0' failed. This is a known bug, fixed by upstream commit 8805b0[1], included in rsyslog 5.8.13. Applying this commit to wheezy's 5.8.11-2 fixed the issue for us. Regards, Apollon [1] http://git.adiscon.com/?p=rsyslog.git;a=commitdiff;h=8805b0f25ff1409a41ecc2e054896e653e4cfa55 -- System Information: Debian Release: wheezy/sid APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-3-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages rsyslog depends on: ii initscripts 2.88dsf-32 ii libc6 2.13-35 ii lsb-base 4.1+Debian7 ii zlib1g 1:1.2.7.dfsg-13 Versions of packages rsyslog recommends: ii logrotate 3.8.1-4 Versions of packages rsyslog suggests: pn rsyslog-doc <none> pn rsyslog-gnutls <none> pn rsyslog-gssapi <none> pn rsyslog-mysql | rsyslog-pgsql <none> ii rsyslog-relp 5.8.11-2 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
