Limiting queue disk space does not work, upgrade needed

Bug #1380976 reported by Simon Lundström
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
rsyslog (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

# lsb_release -rd
Description: Ubuntu 14.04.1 LTS
Release: 14.04
# apt-cache policy rsyslog
rsyslog:
  Installed: 7.4.4-1ubuntu2.3
  Candidate: 7.4.4-1ubuntu2.3
  Version table:
 [...]

When rsyslog is run with a config to save/cache log to disk, e.g when the host that
it is forwarding log to is not responding, it fails to respect the
maxdiskspace parameter. This is a known bug and 7.4.7 of v7-stable has
been released to fix this, see http://www.rsyslog.com/changelog-for-7-4-7-v7-stable/

Config for testing:

global(
  workDirectory="/tmp"
)

module(load="imudp")
module(load="omrelp")

input(type="imudp"
  port="514"
)

action(type="omrelp"
  target="localhost"
  port="2514"
  action.resumeRetryCount="-1"
  queue.saveonshutdown="on"
  queue.type="LinkedList"
  queue.filename="omrelp"

  queue.maxfilesize="100M"
  queue.maxdiskspace="1M"

  queue.checkpointinterval="100"
  queue.highwatermark="10"
)

Then just log more than 1MB of messages to UDP to see that it doesn't
stop at 1MB but just continues forever.

Please upgrade the package to 7.4.7.

Revision history for this message
Simon Lundström (simmel) wrote :

To solve the immediate problem you can also just apply this https://github.com/rsyslog/rsyslog/commit/f6000c70fb6f04fbe38761bb22777070a56eb471.patch which solves the issue.

I tried to create a debdiff but the package doesn't build currently, I think because of the recent security patch.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in rsyslog (Ubuntu):
status: New → Confirmed
Revision history for this message
Malte Schmidt (maltris) wrote :

I confirmed this bug as it still affects 7.4.4-1ubuntu2.7 from trusty-updates.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.