Package: rsyslog-pgsql
Version: 7.4.4-1
Severity: important
Using a combination of imklog and ompgsql results in a 100% CPU load as
soon as something gets written to the kernel log. Furthermore, the
following message is continuously spammed to kern.*:
rsyslogd: imklog: error reading kernel log - shutting down: Bad file
descriptor
I can successfully reproduce this problem by running rsyslogd with the
attached minimal config (just imuxsock+imklog+ompgsql), and then
triggering a write to the kernel log, in my case by plugging in a USB stick.
I initially noticed this with the backported package in wheezy, and I
assumed it had something to do with the backport. I was wrong, though,
as I can reproduce this issue here on jessie as well.
On wheezy, this problem does not occur with rsyslog v5.8.11 (both with
the default 3.2 kernel and the backported 3.12).
I don't know why it should make a difference, but in any case: the
Postgres database I'm connecting to with ompgsql is connecting to is
a remote one (TCP).
Christian
-- System Information:
Debian Release: jessie/sid
APT prefers testing-updates
APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.12-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages rsyslog-pgsql depends on:
ii dbconfig-common 1.8.47+nmu1
ii debconf [debconf-2.0] 1.5.52
ii libc6 2.17-97
ii libpq5 9.3.2-1
ii rsyslog 7.4.4-1
ii ucf 3.0027+nmu1
Versions of packages rsyslog-pgsql recommends:
ii postgresql-client 9.3+152
ii postgresql-client-9.3 [postgresql-client] 9.3.2-1
Versions of packages rsyslog-pgsql suggests:
pn postgresql <none>
-- debconf information:
rsyslog-pgsql/missing-db-package-error: abort
rsyslog-pgsql/db/app-user: rsyslog
rsyslog-pgsql/internal/skip-preseed: true
rsyslog-pgsql/pgsql/authmethod-admin: ident
rsyslog-pgsql/upgrade-error: abort
rsyslog-pgsql/pgsql/authmethod-user:
rsyslog-pgsql/pgsql/method: unix socket
rsyslog-pgsql/upgrade-backup: true
rsyslog-pgsql/passwords-do-not-match:
rsyslog-pgsql/pgsql/manualconf:
rsyslog-pgsql/install-error: abort
rsyslog-pgsql/pgsql/changeconf: false
rsyslog-pgsql/db/dbname: Syslog
* rsyslog-pgsql/dbconfig-install: false
rsyslog-pgsql/remove-error: abort
rsyslog-pgsql/remote/newhost:
rsyslog-pgsql/pgsql/admin-user: postgres
rsyslog-pgsql/dbconfig-reinstall: false
rsyslog-pgsql/pgsql/no-empty-passwords:
rsyslog-pgsql/internal/reconfiguring: false
rsyslog-pgsql/dbconfig-upgrade: true
rsyslog-pgsql/dbconfig-remove:
rsyslog-pgsql/purge: false
rsyslog-pgsql/database-type: pgsql
rsyslog-pgsql/remote/host:
rsyslog-pgsql/remote/port:
$ModLoad imuxsock
$ModLoad imklog
*.*;kern.none /tmp/kern.none.log
# "Bad file descriptor" messages get spammed to this
kern.* /tmp/kern.log
$ModLoad ompgsql
*.* :ompgsql:HOST,USER,DB,PASS
