Thanks you for the answer!
Below is the exact config for official rsyslog-8.10.0.ad1-2.el7.x86_64 from
my test CentOS 7 machine
# grep -v '^#\|^$' /etc/rsyslog.conf
$ModLoad imuxsock # provides support for local system logging (e.g. via
logger command)
$ModLoad imklog # reads kernel messages (the same are read from journald)
$WorkDirectory /var/lib/rsyslog
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$IncludeConfig /etc/rsyslog.d/*.conf
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
cron.* /var/log/cron
*.emerg :omusrmsg:*
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
# ls /etc/rsyslog.d/
00-server.conf 50-client.conf listen.conf
# cat /etc/rsyslog.d/00-server.conf
$ModLoad imrelp
$InputRELPServerRun 2514
$template DynHostMessages,
"/var/log/HOSTS/%HOSTNAME%/messages-%$YEAR%%$MONTH%%$DAY%"
if $inputname == 'imrelp' then {
*.* -?DynHostMessages
stop
}
# cat /etc/rsyslog.d/50-client.conf
$ModLoad omrelp
*.* :omrelp:127.0.0.1:2514
# cat /etc/rsyslog.d/listen.conf
$SystemLogSocketName /run/systemd/journal/syslog
On every restart Rsyslog process hangs without eating any resources.
There is no loops because of config files order and immediately stopping
everything received from imrelp as shown above.
I believe the problem is in RELP module because there is not problems then
I switch to TCP module as shown below.
# cat /etc/rsyslog.d/00-server.conf
$ModLoad imtcp
$InputTCPServerRun 514
$template DynHostMessages,
"/var/log/HOSTS/%HOSTNAME%/messages-%$YEAR%%$MONTH%%$DAY%"
if $inputname == 'imtcp' then {
*.* -?DynHostMessages
stop
}
# cat /etc/rsyslog.d/50-client.conf
$ModLoad omrelp
*.* @@127.0.0.1:514
Regards
Aleksey
On Fri, Jun 12, 2015 at 5:09 PM, David Lang <[email protected]> wrote:
> What else in is the config?
>
> when you say it hangs on a restart, is it eating CPU, doing a lot of I/O
> or just sitting doing nothing?
>
> I don't see a good reason to send to yourself over relp, and if your
> server is doing that, you are trying very hard to create a loop.
>
> David lang
>
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
