[Bug 783177] New: rsyslog, after mandatory update to 5.10.0, truncates messages.
https://bugzilla.novell.com/show_bug.cgi?id=783177 https://bugzilla.novell.com/show_bug.cgi?id=783177#c0 Summary: rsyslog, after mandatory update to 5.10.0, truncates messages. Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: openSUSE 12.1 Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: carlos.e.r@opensuse.org QAContact: qa-bugs@suse.de Found By: --- Blocker: --- rsyslog, after mandatory update to 5.10.0, truncates messages. Using oS 12.1 I issue this sample command: logger -p local3.info --tag TestingSyslog --id "En un lugar de la Mancha, había un hidalgo..." and then I see this in the log: <19.6> 2012-10-02 14:18:28 Telcontar TestingSyslog 4800 - - la Mancha, había un hidalgo... Notice that the message is not complete. This is hapening for all messages: <3.6> 2012-10-02 14:15:43 Telcontar smartd 4176 - - d [SAT], state written to /var/lib/smartmontools/smartd.ST31000528AS-9VPATVWS.ata.state <3.6> 2012-10-02 14:15:43 Telcontar smartd 4180 - - ()ed into background mode. New PID=4180. <4.6> 2012-10-02 14:15:43 Telcontar SuSEfirewall2 - - - s from /etc/sysconfig/SuSEfirewall2 ... <4.6> 2012-10-02 14:15:43 Telcontar SuSEfirewall2 - - - one 'ext' for interface eth1 <4.6> 2012-10-02 14:15:43 Telcontar SuSEfirewall2 - - - ary rules loaded from /etc/sysconfig/scripts/SuSEfirewall2-custom <4.6> 2012-10-02 14:15:44 Telcontar SuSEfirewall2 - - - successfully set After I downgrade rsyslog to the previous version, the problem is solved: <5.6> 2012-10-02 14:20:50 Telcontar rsyslogd - - - [origin software="rsyslogd" swVersion="5.10.0" x-pid="2638" x-info="http://www.rsyslog.com"] exiting on signal 15. <0.6> 2012-10-02 14:20:50 Telcontar kernel - - - imklog 5.8.5, log source = /proc/kmsg started. <5.6> 2012-10-02 14:20:50 Telcontar rsyslogd - - - [origin software="rsyslogd" swVersion="5.8.5" x-pid="4902" x-info="http://www.rsyslog.com"] start <19.6> 2012-10-02 14:21:12 Telcontar TestingSyslog 5090 - - En un lugar de la Mancha, había un hidalgo... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c1
--- Comment #1 from Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c
Marcus Meissner
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c2
Otto Rodusek
/dev/null^I^I^I2>&1) Oct 3 18:30:01 bunyip /USR/SBIN/CRON[11776]: r/lib64/sa/sa1 -S XALL 1 1^I>>/var/log/appbin/sa1.log) Oct 3 18:30:01 bunyip /USR/SBIN/CRON[11774]: r/local/sysusage/bin/sysusage /dev/null^I^I^I2>&1) Oct 3 18:30:01 bunyip /USR/SBIN/CRON[11775]: r/local/sysusage/bin/sysusagegraph >/dev/null^I^I^I2>&1) Oct 3 18:35:01 bunyip /USR/SBIN/CRON[11807]: r/local/sysusage/bin/sysusage /dev/null^I^I^I2>&1)
As can be seen, all the messages are truncated!! Can this be resolved or is there another update to rsyslog?? Thanks for any help. Best regards. Otto. PS: systemd-journal however seems to be reporting correctly without any truncation (if that helps??!!) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c3
Florian Piekert
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c
Marcus Meissner
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c4
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c5
--- Comment #5 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c6
--- Comment #6 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c7
--- Comment #7 from Florian Piekert
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c8
--- Comment #8 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c11
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c12
--- Comment #12 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c13
--- Comment #13 from Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c14
--- Comment #14 from Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c15
Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c16
Marius Tomaschewski
un hidalgo..." exodus2:~ # logger -p local3.info --tag TestingSyslog --id "En un lugar de la Mancha, habíaun hidalgo..." exodus2:~ # tail -2 /var/log/messages Oct 10 18:30:18 exodus2 TestingSyslog[2893]: En un lugar de la Mancha, había#012un hidalgo... Oct 10 18:30:23 exodus2 TestingSyslog[2894]: En un lugar de la Mancha, habíaun hidalgo...
socket activation is OK: # lsof | grep -E "/dev/log|journal/syslog" ; lsof | grep -E "kmsg" systemd 1 root 26u unix 0xffff88000cc75440 0t0 3669 /dev/log rsyslogd 21390 root 3u unix 0xffff88000cc75440 0t0 3669 /dev/log rs:main 21390 21391 root 3u unix 0xffff88000cc75440 0t0 3669 /dev/log rsyslogd 21390 21393 root 3u unix 0xffff88000cc75440 0t0 3669 /dev/log rsyslogd 21390 21394 root 3u unix 0xffff88000cc75440 0t0 3669 /dev/log rsyslogd 21390 21395 root 3u unix 0xffff88000cc75440 0t0 3669 /dev/log rs:action 21390 21396 root 3u unix 0xffff88000cc75440 0t0 3669 /dev/log systemd 1 root 3w CHR 1,11 0t0 1622 /dev/kmsg systemd-s 304 root 7w CHR 1,11 0t0 1622 /dev/kmsg rsyslogd 21390 root 0r REG 0,3 0 4026532033 /proc/kmsg rs:main 21390 21391 root 0r REG 0,3 0 4026532033 /proc/kmsg rsyslogd 21390 21393 root 0r REG 0,3 0 4026532033 /proc/kmsg rsyslogd 21390 21394 root 0r REG 0,3 0 4026532033 /proc/kmsg rsyslogd 21390 21395 root 0r REG 0,3 0 4026532033 /proc/kmsg rs:action 21390 21396 root 0r REG 0,3 0 4026532033 /proc/kmsg -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c17
Marius Tomaschewski
There you have. Remember that I'm not running the updated syslog, and this is 12.1. Other reporters are using 12.2. If you want the grep output while using the broken package, please say so.
Of course using "broken package" please. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c18
--- Comment #18 from Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c19
Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c20
--- Comment #20 from Florian Piekert
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c21
--- Comment #21 from Florian Piekert
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c22
Marius Tomaschewski
Created an attachment (id=508998) --> (http://bugzilla.novell.com/attachment.cgi?id=508998) [details] grep_output as requested, faulty rsyslog
Notice also that not everybody is seeing this problem.
Yes, this is my major problem - I cannot :-)
I'm running systemv at the moment.
yes, I see. And you still see the truncation? Can everybody able to reproduce it please attach strace to the main rsyslog pid using: strace -fF -tt -s1024 -etrace=read,write,network -orsyslog.strace -s1024 -p $(cat /var/run/rsyslogd.pid) monitor it e.g. using: tail -f rsyslog.strace /var/log/messages to try to capture a truncated message? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c23
--- Comment #23 from Florian Piekert
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c24
Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c25
--- Comment #25 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c27
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c28
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c29
--- Comment #29 from Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c30
Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c31
--- Comment #31 from Carlos Robinson
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c32
--- Comment #32 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c33
--- Comment #33 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c34
--- Comment #34 from Otto Rodusek
Is somebody able to reproduce it using the default config?
Otto, could you attach your config as well?
Hi Marius, Sorry got your email late - was travelling. Here is my rsyslog.conf. cat rsyslog.conf ## ## Note, that when the MYSQL, PGSQL, GSSAPI, GnuTLS or SNMP modules ## (provided in separate rsyslog-module-* packages) are enabled, the ## configuration can't be used on a system with /usr on a remote ## filesystem. ## [The modules are linked against libraries installed bellow of /usr ## thus also installed in /usr/lib*/rsyslog because of this.] ## ## You can change it by adding network-remotefs to the Required-Start ## and Required-Stop LSB init tags in the /etc/init.d/syslog script. ## # # if you experience problems, check # http://www.rsyslog.com/troubleshoot for assistance # and report them at http://bugzilla.novell.com/ # # rsyslog v3: load input modules # If you do not load inputs, nothing happens! $ModLoad immark.so # provides --MARK-- message capability $ModLoad imuxsock.so # provides support for local system logging (e.g. via logger command) $SystemLogRateLimitInterval 0 $SystemLogRateLimitBurst 2000 $SystemLogUsePIDFromSystem on $ModLoad imklog.so # kernel logging (may be also provided by /sbin/klogd) # # Include config generated by /etc/init.d/syslog script # using the SYSLOGD_ADDITIONAL_SOCKET* variables in the # /etc/sysconfig/syslog file. # $IncludeConfig /var/run/rsyslog/additional-log-sockets.conf # # Include config files, that the admin provided? : # $IncludeConfig /etc/rsyslog.d/*.conf ### # # print most on tty10 and on the xconsole pipe # kern.warning;*.err;authpriv.none /dev/tty10;RSYSLOG_TraditionalFileFormat kern.warning;*.err;authpriv.none |/dev/xconsole;RSYSLOG_TraditionalFileFormat *.emerg * # enable this, if you want that root is informed # immediately, e.g. of logins #*.alert root # # firewall messages into separate file and stop their further processing # if ($syslogfacility-text == 'kern') and \ ($msg contains 'IN=' and $msg contains 'OUT=') then \ -/var/log/firewall;RSYSLOG_TraditionalFileFormat if ($syslogfacility-text == 'kern') and \ ($msg contains 'IN=' and $msg contains 'OUT=') then \ ~ # # acpid messages into separate file and stop their further processing # # => all acpid messages for debuging (uncomment if needed): #if ($programname == 'acpid' or $syslogtag == '[acpid]:') then \ # -/var/log/acpid;RSYSLOG_TraditionalFileFormat # # => up to notice (skip info and debug) if ($programname == 'acpid' or $syslogtag == '[acpid]:') and \ ($syslogseverity <= 5) then \ -/var/log/acpid;RSYSLOG_TraditionalFileFormat if ($programname == 'acpid' or $syslogtag == '[acpid]:') then \ ~ # # NetworkManager into separate file and stop their further processing # if ($programname == 'NetworkManager') or \ ($programname startswith 'nm-') then \ -/var/log/NetworkManager;RSYSLOG_TraditionalFileFormat if ($programname == 'NetworkManager') or \ ($programname startswith 'nm-') then \ ~ # # email-messages # mail.* -/var/log/mail;RSYSLOG_TraditionalFileFormat mail.info -/var/log/mail;RSYSLOG_TraditionalFileFormat mail.warning -/var/log/mail;RSYSLOG_TraditionalFileFormat mail.err -/var/log/mail;RSYSLOG_TraditionalFileFormat # # news-messages # news.* -/var/log/news;RSYSLOG_TraditionalFileFormat news.crit -/var/log/news;RSYSLOG_TraditionalFileFormat news.err -/var/log/news;RSYSLOG_TraditionalFileFormat news.notice -/var/log/news;RSYSLOG_TraditionalFileFormat # enable this, if you want to keep all news messages in one file news.* -/var/log/news;RSYSLOG_TraditionalFileFormat # # Warnings in one file # *.=warning;*.=err -/var/log/warn;RSYSLOG_TraditionalFileFormat *.crit -/var/log/warn;RSYSLOG_TraditionalFileFormat # # the rest in one file # *.*;mail.none;news.none -/var/log/messages;RSYSLOG_TraditionalFileFormat # # enable this, if you want to keep all messages # in one file #*.* -/var/log/messages;RSYSLOG_TraditionalFileFormat # # Some foreign boot scripts require local7 # local0,local1.* -/var/log/messages;RSYSLOG_TraditionalFileFormat local2,local3.* -/var/log/messages;RSYSLOG_TraditionalFileFormat local4,local5.* -/var/log/messages;RSYSLOG_TraditionalFileFormat local6,local7.* -/var/log/messages;RSYSLOG_TraditionalFileFormat ### -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c35
--- Comment #35 from Otto Rodusek
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c36
--- Comment #36 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c37
--- Comment #37 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c38
--- Comment #38 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c39
--- Comment #39 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c40
--- Comment #40 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c41
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c42
--- Comment #42 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c43
--- Comment #43 from Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c44
--- Comment #44 from Benjamin Brunner
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c45
Benjamin Brunner
https://bugzilla.novell.com/show_bug.cgi?id=783177
https://bugzilla.novell.com/show_bug.cgi?id=783177#c46
--- Comment #46 from Swamp Workflow Management
participants (1)
-
bugzilla_noreply@novell.com