Hi everybody, I did seek for an answer on your mailing list archive, but did not get a concrete answer concerning the problem I am witnessing with rsyslog and power failure. Here are more info:
rsyslog version: 5.8.5 it happens sporadically that our syslog log file does contain only few system logs like kernel logs but not any of our logs! We isolated the problem down and could only reproduce the problem by producing a hard shutdown (hitting the power button) When starting up, we noticed that the rsyslogd is running despite no lock was created in the /tmp/.rsyslog-lock Another consequence is that our /home/roche/share/log/syslog does not log any of our project traces. Killing rsyslogd and starting it again will start to log our project entries into the syslog! Does someone out there encountered the same problems? Do someone have an idea why this happens? Does someone sees a misconfiguration ? Or should I start the rsyslogd in another way? here are the configuration files: note: there are no additional configuration files in the /home/roche/etc/rsyslog.d/ ------------------------------------ rsyslog.conf----------------------------------------------------------- # Begin /etc/rsyslog.conf $ModLoad immark # provides --MARK-- message capability $ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $ModLoad imklog # provides kernel logging support (previously done by rklogd) daemon.* -/var/log/daemon.log kern.* -/var/log/kern.log user.* -/var/log/user.log # Use traditional timestamp format. $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $EscapeControlCharactersOnReceive off $template RocheSysLog,"%programname% %msg%\n" # # Include all config files in /home/roche/etc/rsyslog.d/ # $IncludeConfig /home/roche/etc/rsyslog.d/*.conf # allow reading for all users $FileCreateMode 0644 *.* /home/roche/share/log/syslog # and disable reading again $FileCreateMode 0640 # End /etc/rsyslog.conf ------------------------------------ ! rsyslog.conf----------------------------------------------------------- ------------------------------------ /etc/init.d/rsyslogd ----------------------------------------------------------- #!/bin/sh # # rsyslog server # PREFIX="rsyslog: " THISFILE=$0 PIDFILE="/tmp/.rsyslog-lock" usage() { echo "${PREFIX}usage: $THISFILE [start|stop]" } case $1 in start) echo "${PREFIX} starting" if [ -e "$PIDFILE" ]; then echo "${PREFIX} another rsyslog server seems to be running, aborting" exit 1 else /usr/sbin/rsyslogd -c5 -f /etc/rsyslog.conf -i $PIDFILE -n 2>/dev/null 1>/dev/null & fi ;; stop) echo "${PREFIX} stopping" if [ ! -e "$PIDFILE" ]; then echo "${PREFIX} there seems to be no server running" exit 1 fi kill `cat $PIDFILE` rm -f $PIDFILE pkill rsyslogd echo "${PREFIX} done" ;; *) usage exit 1 ;; esac ------------------------------------ ! /etc/init.d/rsyslogd ----------------------------------------------------------- Best regards -- Eric _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.