Ubuntu
rsyslog package

  1. Bug #1366829
  2. Comment #0

Comment 0 for bug 1366829

Revision history for this message
Patrice (patrice-g) wrote : Updating to rsyslog - 7.4.4-1ubuntu2.1 makes rsyslogd to take all the CPU

After updating rsyslog from 7.4.4-1ubuntu2 to 7.4.4-1ubuntu2.1 the rsyslogd process started to take all the CPU on my machine.
The modification made by this release is described in #1274444, it is the activation of KLogPermitNonKernelFacility option.
I don't know exactly of is the effect of this option but it seems to have a permanent effect : even after downgrading the package or manually removing the option from /etc/rsyslog.conf the issue remains.
My syslog is full of :
Sep 8 10:28:40 sentry rsyslogd: imklog: error reading kernel log - shutting down: Bad file descriptor
Sep 8 10:28:40 sentry rsyslogd: message repeated 498 times: [imklog: error reading kernel log - shutting down: Bad file descriptor]
Sep 8 10:28:46 sentry rsyslogd-2177: rsyslogd[internal_messages]: 519517 messages lost due to rate-limiting
I guess this is what causes the CPU load.

I am running Ubuntu 14.04.1 LTS in an OpenVZ container on Proxmox 3.2. The kernel is 2.6.32-28-pve