rsyslog doesn't start and dumps core when imfile plugin is used

Solution Verified - Updated -

Issue

  • When using the imfile plugin to read external log files, rsyslog doesn't start any and dumps core:

    # systemctl start rsyslog
    # systemctl status rsyslog
    [...]
    Process: XXX ExecStart=/usr/sbin/rsyslogd -n $SYSLOGD_OPTIONS (code=killed, signal=SEGV)
    [...]
    
  • The following coredump backtrace can be seen

    # gdb /usr/sbin/rsyslogd coredump
    [...]
    (gdb) bt
    #0  0x00007efdca236cd7 in process_symlink (chld=chld@entry=0x563611ba6030, symlink=symlink@entry=0x7efdb00022c0 "/var/log/myplace_symlink") at imfile.c:710
    #1  0x00007efdca2370cb in poll_tree (chld=0x563611ba6030) at imfile.c:754
    #2  0x00007efdca23284d in fs_node_walk (node=<optimized out>, f_usr=f_usr@entry=0x7efdca236e60 <poll_tree>) at imfile.c:957
    #3  0x00007efdca232859 in fs_node_walk (node=<optimized out>, f_usr=f_usr@entry=0x7efdca236e60 <poll_tree>) at imfile.c:958
    #4  0x00007efdca232859 in fs_node_walk (node=<optimized out>, f_usr=f_usr@entry=0x7efdca236e60 <poll_tree>) at imfile.c:958
    #5  0x00007efdca232859 in fs_node_walk (node=<optimized out>, f_usr=f_usr@entry=0x7efdca236e60 <poll_tree>) at imfile.c:958
    #6  0x00007efdca236591 in doPolling () at imfile.c:1925
    #7  runInput (pThrd=<optimized out>) at imfile.c:2152
    #8  0x0000563610eb74f4 in thrdStarter (arg=0x563611baf0a0) at ../threads.c:226
    #9  0x00007efdcdd8fea5 in start_thread (arg=0x7efdbe22d700) at pthread_create.c:307
    #10 0x00007efdcce838dd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
    (gdb)
    

Environment

  • Red Hat Enterprise Linux 7 and later
    • rsyslog
    • imfile

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content