rsyslog fills the root filesystem by spamming messages

Bug #2003105 reported by Michał J. Gajda
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
rsyslog (Ubuntu)
New
Undecided
Unassigned

Bug Description

Today, I lost some of my data.
I had a file open in Vim, and lost it, since rsyslog quickly produced over 450GB on 1TB root filesystem within a day.
It should correctly limit the log spam by default, but instead it creates its own log file.
Since it is installed by other software, end user is surprised when is root filesystem is filled with useless messages.

In my case the messages came from `snap` for desktop integration continuously restarting for unknown reasons.

journald and `printk` limit rate of log spamming by default just to prevent data loss for the same reason.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: rsyslog (not installed)
ProcVersionSignature: Ubuntu 5.15.0-57.63-lowlatency 5.15.74
Uname: Linux 5.15.0-57-lowlatency x86_64
ApportVersion: 2.20.11-0ubuntu82.3
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Tue Jan 17 18:37:49 2023
InstallationDate: Installed on 2022-11-08 (70 days ago)
InstallationMedia: Ubuntu 22.04.1 LTS "Jammy Jellyfish" - Release amd64 (20220809.1)
SourcePackage: rsyslog
UpgradeStatus: No upgrade log present (probably fresh install)
modified.conffile..etc.logrotate.d.rsyslog: [deleted]

Revision history for this message
Michał J. Gajda (mgajda) wrote :
Revision history for this message
Michał J. Gajda (mgajda) wrote :

Note that this applies `rsyslog-8.2112.0-2ubuntu2.2`, but I needed to remove it from my machine before system allowed me to do anything.
Otherwise rsyslog spams SSD, and I am unable to do anything, and some programs crash due to lack of disk space.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.