[Bug 809916] New: systemd floods "/var/log/messages" when syslog-ng is used
https://bugzilla.novell.com/show_bug.cgi?id=809916 https://bugzilla.novell.com/show_bug.cgi?id=809916#c0 Summary: systemd floods "/var/log/messages" when syslog-ng is used Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: 64bit OS/Version: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: bugzilla@singvogel.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:19.0) Gecko/20100101 Firefox/19.0 When booting openSUSE-12.3 and having syslog-ng chosen, the systemd floods /var/log/messages when the same message: systemd[1]: syslog-ng.service start request repeated too quickly, refusing to start. This message is around 1100 times in /var/log/messages. This only happens when booting only. The syslog-ng daemon is running as expected after boot: 1x. The fault is the number of same messages in /var/log/messages. Reproducible: Always This is a openSUSE-12.3 bugzilla entry, but I cannot choose the 12.3 in selection field at the moment. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c
Klaus Singvogel
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c
Xiaolong Li
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c1
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c2
Klaus Singvogel
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c3
--- Comment #3 from peter czanik
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c4
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c5
--- Comment #5 from Klaus Singvogel
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c6
--- Comment #6 from Klaus Singvogel
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c7
--- Comment #7 from Marius Tomaschewski
No, I didn't change systemd log level - btw. didn't know that this is possible.
OK, then I don't need to ask if you changed the /etc/systemd/{system.conf,journald.conf} somehow or set some systemd.* boot parameters (cat /proc/cmdline)? ;-)
Yes, I know that "suppress(30)" should reduce the number of messages, and checked it before opening the bugzilla entry. But a) suppressing them is not the solution
Not? I fear it is the only solution available. Except of fixing the program that generates the message to not log same message again and again -> something for "osc bugowner systemd" in this case, not for "osc bugowner syslog-ng".
b) suppress(30) is enabled and doesn't work.
Not? On my host the suppression generally works: # grep suppress /var/log/messages shows me message lines like: systemd: Last message 'Deactivating swap /d' repeated 2 times, suppressed by syslog-ng # for i in {1..30} ; do logger baaaaaaaaarrrrrrrr ; done # logger flood end # grep baaa /var/log/messages ...: baaaaaaaaarrrrrrrr ...: Last message 'baaaaaaaaarrrrrrrr' repeated 29 times, suppressed by syslog-ng on ...
Yes, I have a modified syslog-ng.conf file, but there are no changes, which are related here.
But for sake of completeness, I've attached my modified syslog-ng.conf - see above
Yes... your config looks fine and contains the suppress option for /var/log/messages. In your message there is also no "[ xxx.yyyyyyyy]" kernel like monotonic clock timestamp in the front of the message which could make them look unique ... right? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c8
Marius Tomaschewski
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c9
--- Comment #9 from Klaus Singvogel
if you changed the /etc/systemd/{system.conf,journald.conf} somehow or set some systemd.* boot parameters (cat /proc/cmdline)?
No change made.
Not? I fear it is the only solution available.
This is only fixing the symptoms not the cause.
Not? On my host the suppression generally works:
sorry, for misunderstanding. At my side suppress() works in general too: # grep -c suppress /var/log/messages 4 but suppress() doesn't work for this issue.
In your message there is also no "[ xxx.yyyyyyyy]" kernel like monotonic clock timestamp in the front of the message which could make them look unique ... right?
I cut it away: unnecessary information for bug report when boot time, and sytem time was. But I think this is the reason why suppress() doesn't work: the kernel time is measured in microseconds, and is part of the log message too. So the message is constantly changing, and suppress() cannot find duplicates therefore. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c10
--- Comment #10 from Juergen Weigert
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c11
--- Comment #11 from Frederic Crozat
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c12
--- Comment #12 from peter czanik
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c13
--- Comment #13 from Frederic Crozat
@Frederic: the following branch for the upcoming syslog-ng 3.5 version has some patches, which will help syslog-ng to emit proper systemd status messages. It's currently unmerged and untested. Will this be a proper resolution for the problem, once available? https://github.com/algernon/syslog-ng/commits/feature/3.5/systemd/goodies
probably. But maybe adding PID option would be enough -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c
Frederic Crozat
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c14
Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c15
peter czanik
https://bugzilla.novell.com/show_bug.cgi?id=809916
https://bugzilla.novell.com/show_bug.cgi?id=809916#c
Dr. Werner Fink
participants (1)
-
bugzilla_noreply@novell.com