rgerhards at hq
Jun 8, 2012, 8:45 AM
Post #1 of 1
(71 views)
Permalink
|
|
Re: rsyslog 6.3.8 - expression-based filters causing Segmentation fault
|
|
> -----Original Message-----
> From: rsyslog-bounces [at] lists [mailto:rsyslog-
> bounces [at] lists] On Behalf Of Lars Peterson
> Sent: Friday, June 08, 2012 5:19 PM
> To: rsyslog [at] lists
> Subject: [rsyslog] rsyslog 6.3.8 - expression-based filters causing
> Segmentation fault
>
> Hello,
>
> My team is currently working on a new plugin off of the master-
> elasticsearch branch. There very well could be something faulty in our
> config but for some reason whenever we define expression-based filters
> rsyslogd segfaults.
>
> The rules do work for the brief period of time rsyslog runs. When we
> block inbound syslog traffic (via iptables rules) it stays running.
> When we run rsyslog with the rules commented out it stays running as
> well.
>
> Here are a few rules we have defined in rsyslog.conf:
>
> # Linux Tomcat logs
> if ( ( $programname == 'local4' ) and ( $hostname contains_i '-int' or
> $hostname contains_i '-uat' ) ) then { action(type="omfile" file="/v
> ar/log/preprod/log4j") }
> & ~
> if ( ( $programname == 'local4' ) and not ( $hostname contains_i '-int'
> or $hostname contains_i '-uat' or $hostname contains_i 'logstore1'
> ) ) then { action(type="omfile" file="/var/log/prod/log4j") }
>
> We're running CentOS 6.2 with 4 cpus & 4 GB of ram.
Could you run it under valgrind control? If it is mis-adressing, valgrind is usually extremely helpful.
Also, can you try git master branch head? Or is there anything specific in the elasticsearch branch that you need for your plugin?
Rainer
>
> We have debug output too if that'd be useful.
>
> Thanks!
>
> -Lars
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
|
