The rsyslog daemon dies on Red Hat Enterprise Linux 5 and 6

Solution Verified - Updated 2017-12-13T05:50:41+00:00 -

English

• No translations currently exist.

Environment

• Red Hat Enterprise Linux 5

  • rsyslog-3.22.1-3.el5
  • rsyslog-gnutls-3.22.1-3.el5

• Red Hat Enterprise Linux 6

  • rsyslog-4.6.2-2.el6.x86_64
  • rsyslog-gnutls-4.6.2-2.el6.x86_64

Issue

• rsyslogd dies daily on Red Hat Enterprise Linux 5 and 6.

Resolution

• For Red Hat Enterprise Linux 5, this issue should be resolved in rsyslog-3.22.1-7.el5 and later versions. Please see RHBA-2012:0228 for more information.

• For Red Hat Enterprise Linux 6, this issue should be resolved in rsyslog-4.6.2-12.el6 and later versions. Please see RHBA-2011:1673 for more information.

Root Cause

• When running rsyslog using TLS and TCP the rsyslog process will eat memory and CPU, maxing out the CPU and often maxing out the memory in a very short amount of time (a couple of minutes).

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.