[syslog-ng] patterndb + format_json 100% CPU

Gergely Nagy algernon at balabit.hu
Fri Oct 18 17:14:57 CEST 2013


Alexandre Biancalana <biancalana at gmail.com> writes:

> On Fri, Oct 18, 2013 at 6:01 AM, Balazs Scheidler <bazsi77 at gmail.com> wrote:
>
>> I remember a bug in that caused similar symptoms when the output template
>> produced zero length strings.
>>
>> That has been fixed though. But can you try that regardless?
>>
>> Can you perhaps use gdb to check where it is spinning?
>>
>> If not, I would need to reproduce it.
>>
>
> It only happens when I parse log using patterndb mentioned earlier with
> format_json --scope nv-pairs.
>
> Follow the gdb backtrace, let me know if you need anything else.
>
> Program received signal SIGINT, Interrupt.
> g_trash_stack_height (name=<value optimized out>, value=0x620d70 "10228",
> user_data=0x7fffffffe200) at /usr/include/glib-2.0/glib/gutils.h:413
> 413         i++;
> (gdb) bt
> #0  g_trash_stack_height (name=<value optimized out>, value=0x620d70
> "10228", user_data=0x7fffffffe200) at
> /usr/include/glib-2.0/glib/gutils.h:413
> #1  vp_walker_name_split (name=<value optimized out>, value=0x620d70
> "10228", user_data=0x7fffffffe200) at value-pairs.c:455

Hrm. name would be very useful to have here. Can you perhaps compile
syslog-ng with CFLAGS="-ggdb3 -O0", and do a backtrace with that?

I'll try to reproduce the problem with the configs you provided too, but
I likely won't be able to do that before monday.

-- 
|8]



More information about the syslog-ng mailing list