I would look at playing around with setting up a separate queue for the network
connection (probably a good idea anyway) and configure it not to be saved on
shutdown
you may also need to play around with timeouts and retries to shorten the
shutdown time when the network is down.
David Lang
On Tue, 10 Sep 2024, Andy Smith via rsyslog wrote:
Date: Tue, 10 Sep 2024 23:26:03 +0000
From: Andy Smith via rsyslog <rsyslog@lists.adiscon.com>
To: rsyslog@lists.adiscon.com
Cc: Andy Smith <a...@strugglers.net>
Subject: [rsyslog] Remote logging and systemd shutdown
Hi,
I have some Debian servers that are configured to log both locally
and remotely, basically with:
*.* @@loghost:10514
at the end of a usual Debian /etc/rsyslog.conf file.
When rebooting or shutting down ("reboot" or "shutdown -h now") I
get as far as:
[ OK ] Stopped target Network.
Stopping Raise network interfaces...
[ OK ] Stopped Raise network interfaces.
and then it hangs for 90 seconds on "Stopping System Logging
Service.", I can only assume because rsyslog was in the middle of
remotely logging something when the network interfaces were shut
down. After the 90 second systemd timeout, shutdown/reboot does
progress normally.
I tried overriding the rsyslog.service unit with:
[Unit]
After=networking.service
That works, in that it brings rsyslog.service up after the network
has started and stops it before stopping the network.
It's not quite ideal however because the *local* log files are then
missing entries from the entire time the network is down, which can
be quite significant. For example here is the final line before
shutdown and first line after next boot on a simple reboot:
2024-09-10T22:53:31.059980+00:00 hib systemd[1]: Stopped target Multi-User
System.
2024-09-10T22:57:03.345006+00:00 hib systemd[1]: systemd-fsckd.service:
Succeeded.
Are there any better ways to handle this that can preserve local
logging and not hold up the shutdown process?
Thanks,
Andy
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
