Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: RSyslog: users

Re: 5.8.10 RELP server exhausting connections and stops responding

 

 

RSyslog users RSS feed   Index | Next | Previous | View Threaded


arenstar at gmail

Jun 22, 2012, 8:59 AM

Post #1 of 2 (165 views)
Permalink
Re: 5.8.10 RELP server exhausting connections and stops responding

Hay..

im also suffering from this problem....

Anyone have an idea how to fix it? Or is it a bug?

my config is..

##########################################
$ModLoad imklog
$ModLoad omrelp
$ModLoad imuxsock
$PreserveFQDN on

if $syslogfacility-text == 'local5' and $syslogseverity >= '5' then ~

### ON-DISK Queue
# Remote Logging (we use TCP for reliable delivery)
# An on-disk queue is created for this action. If the remote host is
# down, messages are spooled to disk and sent when it is up again.
$WorkDirectory /var/log/rsyslog-queue # where to place spool files
$ActionQueueFileName uniqName # unique name prefix for spool files
$ActionQueueMaxDiskSpace 1g
$ActionQueueSaveOnShutdown on
$ActionQueueType LinkedList
$ActionResumeRetryCount -1
$ActionQueueSaveOnShutdown on
*.* :omrelp:log.example.internal:5140
###########################################

A restart or rsyslog, allows connections to my python backends to work again... Otherwise they just hang and wait..

Cheers
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards


ju2wheels at gmail

Jun 22, 2012, 9:17 AM

Post #2 of 2 (163 views)
Permalink
Re: 5.8.10 RELP server exhausting connections and stops responding [In reply to]

Im still having this issue on my end, no luck resolving it here even
after upgrading to 5.8.13 . I have a similar config to the below except
I increase some of the queue timeouts. What I have found is that on my
server the issue takes about 2 days on average to show up after an
rsyslog service restart on the server.

After restarting the service, my rsyslog responds to RELP normally and
running 'netstat -alnpt | grep rsyslogd | wc -l' my server averages
about 200-250 connections. After about 2 days the rsyslog cpu usage will
spike to 100%, the number of open TCP connections will be around 800 and
it will not respond to RELP connections.

Ive tried adding '$ActionSendTCPRebindInterval 25' to client/server
sides to see if rebinding would help but it didnt.

Ive resorted to restarting my server service daily as I cant figure out
what else to do.


On 06/22/2012 11:59 AM, David Arena wrote:
> Hay..
>
> im also suffering from this problem....
>
> Anyone have an idea how to fix it? Or is it a bug?
>
> my config is..
>
> ##########################################
> $ModLoad imklog
> $ModLoad omrelp
> $ModLoad imuxsock
> $PreserveFQDN on
>
> if $syslogfacility-text == 'local5' and $syslogseverity >= '5' then ~
>
> ### ON-DISK Queue
> # Remote Logging (we use TCP for reliable delivery)
> # An on-disk queue is created for this action. If the remote host is
> # down, messages are spooled to disk and sent when it is up again.
> $WorkDirectory /var/log/rsyslog-queue # where to place spool files
> $ActionQueueFileName uniqName # unique name prefix for spool files
> $ActionQueueMaxDiskSpace 1g
> $ActionQueueSaveOnShutdown on
> $ActionQueueType LinkedList
> $ActionResumeRetryCount -1
> $ActionQueueSaveOnShutdown on
> *.* :omrelp:log.example.internal:5140
> ###########################################
>
> A restart or rsyslog, allows connections to my python backends to work again... Otherwise they just hang and wait..
>
> Cheers
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards


_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

RSyslog users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.