[syslog-ng] syslog-ng with sql() command, cpu to 100%

[Balazs Scheidler]

This is strange especially since there's an SQL related testcase in the
functional test.

Does that run ok? (e.g. please issue "make check" in tests/functional)

On Tue, 2009-10-06 at 16:07 +0100, Jean F. Mousinho wrote:
> I've noticed that this also happens to me, but only when I try to run
> syslog-ng with debugging (-d):
> 
> ./syslog-ng -d -f /etc/syslog-ng/syslog-ng.conf
> 
> (locally compiled version --with-debug)
> 
> ./syslog-ng -V
> syslog-ng 3.0.4
> Revision: ssh
> +git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.0#master#1b5d618e301ad94aa20e692ffba16469dece8d10
> Compile-Date: Oct  2 2009 18:26:51
> Enable-Threads: on
> Enable-Debug: on
> Enable-GProf: off
> Enable-Memtrace: off
> Enable-Sun-STREAMS: off
> Enable-Sun-Door: off
> Enable-IPv6: on
> Enable-Spoof-Source: on
> Enable-TCP-Wrapper: on
> Enable-SSL: on
> Enable-SQL: on
> Enable-Linux-Caps: off
> Enable-Pcre: on
> 
> syslog-ng runs the system out of memory, like an infinite loop
> allocating memory.
> 
> It uses a destination with sql() but its not called during the program
> start since I don't send the message that triggers the filter
> associated..
> 
> Jean F. Mousinho
> 
> On Mon, 2009-10-05 at 08:11 +0000, Garry De Toffoli wrote:
> > I am using the version 3.04 of syslog-ng, as reported:
> > 
> > $./syslog-ng -V
> > syslog-ng 3.0.4
> > Revision: ssh
> > +git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.0#master#1b5d618e301ad94aa20e692ffba16469dece8d10
> > Compile-Date: Aug  5 2009 17:38:20
> > Enable-Threads: on
> > Enable-Debug: off
> > Enable-GProf: off
> > Enable-Memtrace: off
> > Enable-Sun-STREAMS: off
> > Enable-Sun-Door: off
> > Enable-IPv6: on
> > Enable-Spoof-Source: on
> > Enable-TCP-Wrapper: off
> > Enable-SSL: on
> > Enable-SQL: on
> > Enable-Linux-Caps: on
> > Enable-Pcre: off
> > 
> > I would like to use the sql() features;
> > 
> > but syslog-ng does not write anything on dbase, and the cpu go to
> > 100%;
> > 
> > this is the configuration of the destination sql
> > 
> > destination d_mysql {
> >         sql(type(mysql)
> >         host("localhost") username("syslogadmin")
> > password("syslogadmin")
> >         database("syslog")
> >         table("logs")
> >         columns("host", "facility", "priority", "level", "tag",
> > "datetime", "program", "msg", "seq")
> >         values("$HOST_FROM", "$FACILITY", "$PRIORITY", "$LEVEL",
> > "$TAG", "$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC", "$PROGRAM", "$MSG",
> > "$SEQNUM")
> >         indexes("host", "facility", "priority", "datetime", "program",
> > "seq"));
> > };
> > 
> > of course, the configuration like this
> > destination d_mysql {
> >     program("/usr/bin/mysql -usyslogadmin -psyslogadmin syslog"
> >     template("INSERT INTO logs (host, facility, priority, level, tag,
> > datetime, program, msg)
> >     VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG',
> > '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n")
> >     template-escape(yes));
> > };
> > run OK, but I would like to use the sql() statement instead;
> > 
> > what can I do?
> > 
> > Is the sql() command supported by the syslog-ng 3.0.4?
> > 
> > Thank you.
> > 
> > 
> > 
> > ______________________________________________________________________
> > Una risposta istantanea? Usa Messenger da Hotmail
> > ______________________________________________________________________________
> > Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> > FAQ: http://www.campin.net/syslog-ng/faq.html
> > 
> 
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
> 
> 
-- 
Bazsi