messages & cron log file tak update

Masa update crontab dengan job baru perasan yang cron log tak update. /var/log/message juga tak update.

Cari juga penyelesaian di internet dan juga dari portal Red Hat tapi takde yang berhasil.

Punca message & cron log tak update sebab service rsyslogd.service tak running. Bila restart service itu dia akan jadi failed balik.

Terfikir untuk check jika rsyslog ada debug mode dan ya rsyslog ada debug mode.

[root@db logrotate.d]# rsyslogd -help
usage: rsyslogd [options]
use "man rsyslogd" for details. To run rsyslog interactively, use "rsyslogd -n"to run it in debug mode use "rsyslogd -dn"
For further information see http://www.rsyslog.com/doc

Bila run rsyslogd -dn, output dia panjang macam di bawah.

[root@db logrotate.d]# rsyslogd -dn  

1246.603406814:main thread    : rsyslogd 8.24.0-57.el7_9.1 startup, module path '', cwd:/etc/logrotate.d
1246.603480120:main thread    : caller requested object 'net', not found (iRet -3003)
1246.603488719:main thread    : Requested to load module 'lmnet'
1246.603493719:main thread    : loading module '/usr/lib64/rsyslog/lmnet.so'
1246.603558983:main thread    : module lmnet of type 2 being loaded (keepType=0).
1246.603562111:main thread    : entry point 'isCompatibleWithFeature' not present in module
1246.603564221:main thread    : entry point 'setModCnf' not present in module
1246.603566333:main thread    : entry point 'getModCnfName' not present in module
1246.603568334:main thread    : entry point 'beginCnfLoad' not present in module
1246.603571166:main thread    : source file conf.c requested reference for module 'lmnet', reference count now 1
1246.603584196:main thread    : rsyslog runtime initialized, version 8.24.0-57.el7_9.1, current users 1
1246.603611122:main thread    : source file rsyslogd.c requested reference for module 'lmnet', reference count now 2
1246.604995487:main thread    : getaddrinfo: Name or service not known
1246.605004426:main thread    : deque option n, optarg ''
1246.605018284:main thread    : omfile: using transactional output interface.
1246.605037586:main thread    : module builtin:omfile of type 1 being loaded (keepType=0).
1246.605041232:main thread    : module config name is 'omfile'
1246.605043584:main thread    : module builtin:omfile supports rsyslog v6 config interface
1246.605047626:main thread    : entry point 'activateCnfPrePrivDrop' not present in module
1246.605051479:main thread    : entry point 'doHUPWrkr' not present in module
1246.605053645:main thread    : entry point 'SetShutdownImmdtPtr' not present in module
1246.605056022:main thread    : entry point 'doAction' not present in module
1246.605058279:main thread    : entry point 'endTransaction' not present in module
1246.605061958:main thread    : module builtin:ompipe of type 1 being loaded (keepType=0).
1246.605065108:main thread    : module config name is 'ompipe'
1246.605067255:main thread    : module builtin:ompipe supports rsyslog v6 config interface
1246.605070716:main thread    : entry point 'activateCnfPrePrivDrop' not present in module
1246.605074205:main thread    : entry point 'doHUPWrkr' not present in module
1246.605076520:main thread    : entry point 'SetShutdownImmdtPtr' not present in module
1246.605078738:main thread    : entry point 'beginTransaction' not present in module
1246.605081022:main thread    : entry point 'commitTransaction' not present in module
1246.605083209:main thread    : entry point 'endTransaction' not present in module
1246.605088241:main thread    : module builtin-shell of type 1 being loaded (keepType=0).
1246.605090800:main thread    : entry point 'setModCnf' not present in module
1246.605092922:main thread    : entry point 'getModCnfName' not present in module
1246.605094990:main thread    : entry point 'beginCnfLoad' not present in module
1246.605098134:main thread    : entry point 'doHUP' not present in module
1246.605100186:main thread    : entry point 'doHUPWrkr' not present in module
1246.605102221:main thread    : entry point 'SetShutdownImmdtPtr' not present in module
1246.605104453:main thread    : entry point 'beginTransaction' not present in module
1246.605106633:main thread    : entry point 'commitTransaction' not present in module
1246.605108881:main thread    : entry point 'endTransaction' not present in module
1246.605110972:main thread    : entry point 'newActInst' not present in module
1246.605115088:main thread    : module builtin:omdiscard of type 1 being loaded (keepType=0).
1246.605117700:main thread    : entry point 'setModCnf' not present in module
1246.605119817:main thread    : entry point 'getModCnfName' not present in module
1246.605122064:main thread    : entry point 'beginCnfLoad' not present in module
1246.605125195:main thread    : entry point 'doHUP' not present in module
1246.605127247:main thread    : entry point 'doHUPWrkr' not present in module
1246.605129291:main thread    : entry point 'SetShutdownImmdtPtr' not present in module
1246.605131445:main thread    : entry point 'beginTransaction' not present in module
1246.605133616:main thread    : entry point 'commitTransaction' not present in module
1246.605135752:main thread    : entry point 'endTransaction' not present in module
1246.605137833:main thread    : entry point 'newActInst' not present in module
1246.605141652:main thread    : source file omfwd.c requested reference for module 'lmnet', reference count now 3
1246.605153097:main thread    : module builtin:omfwd of type 1 being loaded (keepType=0).
1246.605158095:main thread    : module config name is 'omfwd'
1246.605160370:main thread    : module builtin:omfwd supports rsyslog v6 config interface
1246.605163961:main thread    : entry point 'activateCnfPrePrivDrop' not present in module
1246.605167341:main thread    : entry point 'doHUP' not present in module
1246.605169584:main thread    : entry point 'doHUPWrkr' not present in module
1246.605171709:main thread    : entry point 'SetShutdownImmdtPtr' not present in module
1246.605174031:main thread    : entry point 'doAction' not present in module
1246.605176321:main thread    : entry point 'endTransaction' not present in module
1246.605179744:main thread    : module builtin:omusrmsg of type 1 being loaded (keepType=0).
1246.605182471:main thread    : entry point 'setModCnf' not present in module
1246.605184871:main thread    : module config name is 'omusrmsg'
1246.605186919:main thread    : entry point 'beginCnfLoad' not present in module
1246.605190066:main thread    : entry point 'doHUP' not present in module
1246.605192204:main thread    : entry point 'doHUPWrkr' not present in module
1246.605194261:main thread    : entry point 'SetShutdownImmdtPtr' not present in module
1246.605196365:main thread    : entry point 'beginTransaction' not present in module
1246.605198645:main thread    : entry point 'commitTransaction' not present in module
1246.605200757:main thread    : entry point 'endTransaction' not present in module
1246.605204479:main thread    : rfc5424 parser init called
1246.605206651:main thread    : GetParserName addr 0x55a5e7eef380
1246.605208811:main thread    : module builtin:pmrfc5424 of type 3 being loaded (keepType=0).
1246.605211062:main thread    : entry point 'setModCnf' not present in module
1246.605213111:main thread    : entry point 'getModCnfName' not present in module
1246.605215139:main thread    : entry point 'beginCnfLoad' not present in module
1246.605217231:main thread    : entry point 'parse2' not present in module
1246.605221114:main thread    : DDDDD: added parser 'rsyslog.rfc5424' to list 0x55a5e8134b50
1246.605223268:main thread    : Parser 'rsyslog.rfc5424' added to list of available parsers.
1246.605227740:main thread    : rfc3164 parser init called
1246.605230132:main thread    : module builtin:pmrfc3164 of type 3 being loaded (keepType=0).
1246.605232492:main thread    : entry point 'setModCnf' not present in module
1246.605234686:main thread    : module config name is 'pmrfc3164'
1246.605236673:main thread    : entry point 'beginCnfLoad' not present in module
1246.605239265:main thread    : newParserInst (pmrfc3164)
1246.605241719:main thread    : DDDDD: added parser 'rsyslog.rfc3164' to list 0x55a5e8134b50
1246.605243676:main thread    : Parser 'rsyslog.rfc3164' added to list of available parsers.
1246.605246197:main thread    : DDDDD: added parser 'rsyslog.rfc5424' to list 0x55a5e8134b48
1246.605248230:main thread    : Parser 'rsyslog.rfc5424' added to default parser set.
1246.605250313:main thread    : DDDDD: added parser 'rsyslog.rfc3164' to list 0x55a5e8134b48
1246.605252190:main thread    : Parser 'rsyslog.rfc3164' added to default parser set.
1246.605254597:main thread    : rsyslog standard file format strgen init called, compiled with version 8.24.0-57.el7_9.1
1246.605274375:main thread    : module builtin:smfile of type 4 being loaded (keepType=0).
1246.605277904:main thread    : entry point 'isCompatibleWithFeature' not present in module
1246.605281265:main thread    : entry point 'setModCnf' not present in module
1246.605283777:main thread    : entry point 'getModCnfName' not present in module
1246.605285761:main thread    : entry point 'beginCnfLoad' not present in module
1246.605289215:main thread    : Strgen 'RSYSLOG_FileFormat' added to list of available strgens.
1246.605292021:main thread    : traditional file format strgen init called, compiled with version 8.24.0-57.el7_9.1
1246.605294348:main thread    : module builtin:smtradfile of type 4 being loaded (keepType=0).
1246.605302353:main thread    : entry point 'isCompatibleWithFeature' not present in module
1246.605305234:main thread    : entry point 'setModCnf' not present in module
1246.605307375:main thread    : entry point 'getModCnfName' not present in module
1246.605309342:main thread    : entry point 'beginCnfLoad' not present in module
1246.605312178:main thread    : Strgen 'RSYSLOG_TraditionalFileFormat' added to list of available strgens.
1246.605314905:main thread    : rsyslog standard (network) forward format strgen init called, compiled with version 8.24.0-57.el7_9.1
1246.605317244:main thread    : module builtin:smfwd of type 4 being loaded (keepType=0).
1246.605319348:main thread    : entry point 'isCompatibleWithFeature' not present in module
1246.605321392:main thread    : entry point 'setModCnf' not present in module
1246.605323365:main thread    : entry point 'getModCnfName' not present in module
1246.605325319:main thread    : entry point 'beginCnfLoad' not present in module
1246.605327801:main thread    : Strgen 'RSYSLOG_ForwardFormat' added to list of available strgens.
1246.605330305:main thread    : rsyslog traditional (network) forward format strgen init called, compiled with version 8.24.0-57.el7_9.1
1246.605332752:main thread    : module builtin:smtradfwd of type 4 being loaded (keepType=0).
1246.605334879:main thread    : entry point 'isCompatibleWithFeature' not present in module
1246.605336913:main thread    : entry point 'setModCnf' not present in module
1246.605338872:main thread    : entry point 'getModCnfName' not present in module
1246.605340820:main thread    : entry point 'beginCnfLoad' not present in module
1246.605345103:main thread    : Strgen 'RSYSLOG_TraditionalForwardFormat' added to list of available strgens.
1246.605348697:main thread    : doing legacy config system init
1246.605388721:main thread    : tplAddLine processing template 'RSYSLOG_DebugFormat'
1246.605411415:main thread    : tplAddLine processing template 'RSYSLOG_SyslogProtocol23Format'
1246.605417751:main thread    : tplAddLine processing template 'RSYSLOG_FileFormat'
1246.605420485:main thread    : template bound to strgen 'RSYSLOG_FileFormat'
1246.605422633:main thread    : tplAddLine processing template 'RSYSLOG_TraditionalFileFormat'
1246.605424874:main thread    : template bound to strgen 'RSYSLOG_TraditionalFileFormat'
1246.605426865:main thread    : tplAddLine processing template ' WallFmt'
1246.605431214:main thread    : tplAddLine processing template 'RSYSLOG_ForwardFormat'
1246.605433372:main thread    : template bound to strgen 'RSYSLOG_ForwardFormat'
1246.605435338:main thread    : tplAddLine processing template 'RSYSLOG_TraditionalForwardFormat'
1246.605437618:main thread    : template bound to strgen 'RSYSLOG_TraditionalForwardFormat'
1246.605439637:main thread    : tplAddLine processing template ' StdUsrMsgFmt'
1246.605442528:main thread    : tplAddLine processing template ' StdDBFmt'
1246.605449196:main thread    : tplAddLine processing template 'RSYSLOG_SysklogdFileFormat'
1246.605453276:main thread    : tplAddLine processing template ' StdPgSQLFmt'
1246.605537087:main thread    : tplAddLine processing template ' StdJSONFmt'
1246.605544400:main thread    : tplAddLine processing template 'RSYSLOG_omudpspoofDfltSourceTpl'
1246.605587381:main thread    : config parser: pushed file /etc/rsyslog.conf on top of stack
Starting parse
Entering state 0
Reducing stack by rule 1 (line 139):
-> $$ = nterm conf ()
Stack now 0
Entering state 1
Reading a token: 1246.605620389:main thread    : cnf:global:cfsysline: $ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
1246.605625325:main thread    : Requested to load module 'imuxsock'
1246.605628262:main thread    : loading module '/usr/lib64/rsyslog/imuxsock.so'
1246.605695536:main thread    : imuxsock version 8.24.0-57.el7_9.1 initializing
1246.605716306:main thread    : rsyslog/glbl: using '127.0.0.1' as localhost IP
1246.605744094:main thread    : module imuxsock of type 0 being loaded (keepType=0).
1246.605747327:main thread    : module config name is 'imuxsock'
1246.605749430:main thread    : module imuxsock supports rsyslog v6 config interface
1246.605756552:main thread    : cnf:global:cfsysline: $ModLoad imjournal # provides access to the systemd journal
1246.605759823:main thread    : Requested to load module 'imjournal'
1246.605762309:main thread    : loading module '/usr/lib64/rsyslog/imjournal.so'
1246.606413774:main thread    : module imjournal of type 0 being loaded (keepType=0).
1246.606418777:main thread    : module config name is 'imjournal'
1246.606421082:main thread    : module imjournal supports rsyslog v6 config interface
1246.606424147:main thread    : entry point 'activateCnfPrePrivDrop' not present in module
1246.606426794:main thread    : entry point 'newInpInst' not present in module
1246.606435219:main thread    : cnf:global:cfsysline: $WorkDirectory /var/lib/rsyslog
1246.606438888:main thread    : doGetWord: get newval '/var/lib/rsyslog' (len 16), hdlr 0x55a5e7ead1f0
1246.606444883:main thread    : cnf:global:cfsysline: $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
1246.606448123:main thread    : doGetWord: get newval 'RSYSLOG_TraditionalFileFormat' (len 29), hdlr 0x55a5e7eec070
1246.606498932:main thread    : requested to include config file '/etc/rsyslog.d/listen.conf'
1246.606517492:main thread    : config parser: pushed file /etc/rsyslog.d/listen.conf on top of stack
1246.606521235:main thread    : requested to include config file '/etc/rsyslog.d/49-haproxy.conf'
1246.606535211:main thread    : config parser: pushed file /etc/rsyslog.d/49-haproxy.conf on top of stack
1246.606538234:main thread    : cnf:global:cfsysline: $ModLoad imudp
1246.606541866:main thread    : Requested to load module 'imudp'
1246.606544580:main thread    : loading module '/usr/lib64/rsyslog/imudp.so'
1246.606602042:main thread    : source file imudp.c requested reference for module 'lmnet', reference count now 4
1246.606604866:main thread    : imudp: version 8.24.0-57.el7_9.1 initializing
1246.606606782:main thread    : imdup: support for recvmmsg() present
1246.606617485:main thread    : module imudp of type 0 being loaded (keepType=0).
1246.606620488:main thread    : module config name is 'imudp'
1246.606622525:main thread    : module imudp supports rsyslog v6 config interface
1246.606628682:main thread    : cnf:global:cfsysline: $UDPServerAddress 127.0.0.1
1246.606632627:main thread    : doGetWord: get newval '127.0.0.1' (len 9), hdlr (nil)
1246.606634977:main thread    : cnf:global:cfsysline: $UDPServerRun 514
1246.606638309:main thread    : doGetWord: get newval '514' (len 3), hdlr 0x7f9ad543a910
1246.606641647:main thread    : cnf:global:cfsysline: $template HAProxy,"%TIMESTAMP% %syslogseverity-text:::UPPERCASE%: %msg:::drop-last-lf%\n"
1246.606644987:main thread    : tplAddLine processing template 'HAProxy'
1246.606651133:main thread    : cnf:global:cfsysline: $template HAProxyAccess,"%msg%\n"
1246.606654134:main thread    : tplAddLine processing template 'HAProxyAccess'
Next token is token PRIFILT ()
Shifting token PRIFILT ()
Entering state 16
Reading a token: Next token is token IF ()
Shifting token IF ()
Entering state 21
Reading a token: Next token is token VAR ()
Shifting token VAR ()
Entering state 37
Reducing stack by rule 70 (line 228):
   $1 = token VAR ()
-> $$ = nterm expr ()
Stack now 0 1 16 21
Entering state 51
Reading a token: Next token is token CMP_STARTSWITH ()
Shifting token CMP_STARTSWITH ()
Entering state 80
Reading a token: Next token is token STRING ()
Shifting token STRING ()
Entering state 38
Reducing stack by rule 69 (line 227):
   $1 = token STRING ()
-> $$ = nterm expr ()
Stack now 0 1 16 21 51 80
Entering state 117
Reading a token: Next token is token THEN ()
Reducing stack by rule 56 (line 214):
   $1 = nterm expr ()
   $2 = token CMP_STARTSWITH ()
   $3 = nterm expr ()
-> $$ = nterm expr ()
Stack now 0 1 16 21
Entering state 51
Next token is token THEN ()
Shifting token THEN ()
Entering state 93
Reading a token: Next token is token LEGACY_ACTION ()
Shifting token LEGACY_ACTION ()
Entering state 14
Reducing stack by rule 40 (line 196):
   $1 = token LEGACY_ACTION ()
1246.606820901:main thread    : tried selector action for builtin:omfile: 0
1246.606824383:main thread    : Module builtin:omfile processes this action.
1246.606828478:main thread    : template: 'HAProxyAccess' assigned
1246.606837807:main thread    : action 0 queue: parameter dump:
1246.606839953:main thread    : action 0 queue: queue.filename '[NONE]'
1246.606842035:main thread    : action 0 queue: queue.size: 1000
1246.606844013:main thread    : action 0 queue: queue.dequeuebatchsize: 16
1246.606846135:main thread    : action 0 queue: queue.maxdiskspace: 0
1246.606848179:main thread    : action 0 queue: queue.highwatermark: 800
1246.606850161:main thread    : action 0 queue: queue.lowwatermark: 200
1246.606852139:main thread    : action 0 queue: queue.fulldelaymark: -1
1246.606854167:main thread    : action 0 queue: queue.lightdelaymark: -1
1246.606856129:main thread    : action 0 queue: queue.discardmark: 980
1246.606858120:main thread    : action 0 queue: queue.discardseverity: 8
1246.606860108:main thread    : action 0 queue: queue.checkpointinterval: 0
1246.606862086:main thread    : action 0 queue: queue.syncqueuefiles: 0
1246.606864126:main thread    : action 0 queue: queue.type: 3 [Direct]
1246.606866067:main thread    : action 0 queue: queue.workerthreads: 1
1246.606868001:main thread    : action 0 queue: queue.timeoutshutdown: 0
1246.606870034:main thread    : action 0 queue: queue.timeoutactioncompletion: 1000
1246.606872098:main thread    : action 0 queue: queue.timeoutenqueue: 50
1246.606874179:main thread    : action 0 queue: queue.timeoutworkerthreadshutdown: 60000
1246.606876166:main thread    : action 0 queue: queue.workerthreadminimummessages: -1
1246.606887826:main thread    : action 0 queue: queue.maxfilesize: 1048576
1246.606892313:main thread    : action 0 queue: queue.saveonshutdown: 1
1246.606896399:main thread    : action 0 queue: queue.dequeueslowdown: 0
1246.606900693:main thread    : action 0 queue: queue.dequeuetimebegin: 0
1246.606904870:main thread    : action 0 queue: queue.dequeuetimeend: 25
1246.606912230:main thread    : Action 0x55a5e8cac700: queue 0x55a5e8cacb30 created
-> $$ = nterm s_act ()
Stack now 0 1 16 21 51 93
Entering state 26
Reducing stack by rule 37 (line 192):
   $1 = nterm s_act ()
-> $$ = nterm actlst ()
Stack now 0 1 16 21 51 93
Entering state 25
Reading a token: Next token is token PRIFILT ()
Reducing stack by rule 24 (line 171):
   $1 = nterm actlst ()
-> $$ = nterm stmt ()
Stack now 0 1 16 21 51 93
Entering state 47
Reducing stack by rule 35 (line 190):
   $1 = nterm stmt ()
-> $$ = nterm block ()
Stack now 0 1 16 21 51 93
Entering state 129
Next token is token PRIFILT ()
Reducing stack by rule 25 (line 172):
   $1 = token IF ()
   $2 = nterm expr ()
   $3 = token THEN ()
   $4 = nterm block ()
-> $$ = nterm stmt ()
Stack now 0 1 16
Entering state 47
Reducing stack by rule 35 (line 190):
   $1 = nterm stmt ()
-> $$ = nterm block ()
Stack now 0 1 16
Entering state 48
Reducing stack by rule 31 (line 186):
   $1 = token PRIFILT ()
   $2 = nterm block ()
1246.607282898:main thread    : Decoding traditional PRI filter 'local2.=info'
1246.607290955:main thread    : symbolic name: info ==> 6
1246.607312279:main thread    : symbolic name: local2 ==> 144
-> $$ = nterm stmt ()
Stack now 0 1
Entering state 24
Reducing stack by rule 3 (line 141):
   $1 = nterm conf ()
   $2 = nterm stmt ()
1246.607370246:main thread    : cnf:global:script
-> $$ = nterm conf ()
Stack now 0
Entering state 1
Next token is token PRIFILT ()
Shifting token PRIFILT ()
Entering state 16
Reading a token: Next token is token IF ()
Shifting token IF ()
Entering state 21
Reading a token: Next token is token VAR ()
Shifting token VAR ()
Entering state 37
Reducing stack by rule 70 (line 228):
   $1 = token VAR ()
-> $$ = nterm expr ()
Stack now 0 1 16 21
Entering state 51
Reading a token: Next token is token CMP_STARTSWITH ()
Shifting token CMP_STARTSWITH ()
Entering state 80
Reading a token: Next token is token STRING ()
Shifting token STRING ()
Entering state 38
Reducing stack by rule 69 (line 227):
   $1 = token STRING ()
-> $$ = nterm expr ()
Stack now 0 1 16 21 51 80
Entering state 117
Reading a token: Next token is token THEN ()
Reducing stack by rule 56 (line 214):
   $1 = nterm expr ()
   $2 = token CMP_STARTSWITH ()
   $3 = nterm expr ()
-> $$ = nterm expr ()
Stack now 0 1 16 21
Entering state 51
Next token is token THEN ()
Shifting token THEN ()
Entering state 93
Reading a token: Next token is token LEGACY_ACTION ()
Shifting token LEGACY_ACTION ()
Entering state 14
Reducing stack by rule 40 (line 196):
   $1 = token LEGACY_ACTION ()
1246.607807345:main thread    : tried selector action for builtin:omfile: 0
1246.607813214:main thread    : Module builtin:omfile processes this action.
1246.607818721:main thread    : template: 'HAProxy' assigned
1246.607828079:main thread    : action 1 queue: parameter dump:
1246.607832749:main thread    : action 1 queue: queue.filename '[NONE]'
1246.607837222:main thread    : action 1 queue: queue.size: 1000
1246.607844185:main thread    : action 1 queue: queue.dequeuebatchsize: 16
1246.607848556:main thread    : action 1 queue: queue.maxdiskspace: 0
1246.607853511:main thread    : action 1 queue: queue.highwatermark: 800
1246.607858655:main thread    : action 1 queue: queue.lowwatermark: 200
1246.607863481:main thread    : action 1 queue: queue.fulldelaymark: -1
1246.607868650:main thread    : action 1 queue: queue.lightdelaymark: -1
1246.607873398:main thread    : action 1 queue: queue.discardmark: 980
1246.607878551:main thread    : action 1 queue: queue.discardseverity: 8
1246.607883264:main thread    : action 1 queue: queue.checkpointinterval: 0
1246.607888788:main thread    : action 1 queue: queue.syncqueuefiles: 0
1246.607894102:main thread    : action 1 queue: queue.type: 3 [Direct]
1246.607898500:main thread    : action 1 queue: queue.workerthreads: 1
1246.607903732:main thread    : action 1 queue: queue.timeoutshutdown: 0
1246.607908108:main thread    : action 1 queue: queue.timeoutactioncompletion: 1000
1246.607913447:main thread    : action 1 queue: queue.timeoutenqueue: 50
1246.607917824:main thread    : action 1 queue: queue.timeoutworkerthreadshutdown: 60000
1246.607923164:main thread    : action 1 queue: queue.workerthreadminimummessages: -1
1246.607932197:main thread    : action 1 queue: queue.maxfilesize: 1048576
1246.607936822:main thread    : action 1 queue: queue.saveonshutdown: 1
1246.607941199:main thread    : action 1 queue: queue.dequeueslowdown: 0
1246.607945817:main thread    : action 1 queue: queue.dequeuetimebegin: 0
1246.607950111:main thread    : action 1 queue: queue.dequeuetimeend: 25
1246.607954658:main thread    : Action 0x55a5e8cad390: queue 0x55a5e8cad7c0 created
-> $$ = nterm s_act ()
Stack now 0 1 16 21 51 93
Entering state 26
Reducing stack by rule 37 (line 192):
   $1 = nterm s_act ()
-> $$ = nterm actlst ()
Stack now 0 1 16 21 51 93
Entering state 25
Reading a token: Next token is token PRIFILT ()
Reducing stack by rule 24 (line 171):
   $1 = nterm actlst ()
-> $$ = nterm stmt ()
Stack now 0 1 16 21 51 93
Entering state 47
Reducing stack by rule 35 (line 190):
   $1 = nterm stmt ()
-> $$ = nterm block ()
Stack now 0 1 16 21 51 93
Entering state 129
Next token is token PRIFILT ()
Reducing stack by rule 25 (line 172):
   $1 = token IF ()
   $2 = nterm expr ()
   $3 = token THEN ()
   $4 = nterm block ()
-> $$ = nterm stmt ()
Stack now 0 1 16
Entering state 47
Reducing stack by rule 35 (line 190):
   $1 = nterm stmt ()
-> $$ = nterm block ()
Stack now 0 1 16
Entering state 48
Reducing stack by rule 31 (line 186):
   $1 = token PRIFILT ()
   $2 = nterm block ()
1246.608318447:main thread    : Decoding traditional PRI filter 'local2.emerg'
1246.608324334:main thread    : symbolic name: emerg ==> 0
1246.608333039:main thread    : symbolic name: local2 ==> 144
-> $$ = nterm stmt ()
Stack now 0 1
Entering state 24
Reducing stack by rule 3 (line 141):
   $1 = nterm conf ()
   $2 = nterm stmt ()
1246.608391344:main thread    : cnf:global:script
-> $$ = nterm conf ()
Stack now 0
Entering state 1
Next token is token PRIFILT ()
Shifting token PRIFILT ()
Entering state 16
Reading a token: Next token is token IF ()
Shifting token IF ()
Entering state 21
Reading a token: Next token is token VAR ()
Shifting token VAR ()
Entering state 37
Reducing stack by rule 70 (line 228):
   $1 = token VAR ()
-> $$ = nterm expr ()
Stack now 0 1 16 21
Entering state 51
Reading a token: Next token is token CMP_STARTSWITH ()
Shifting token CMP_STARTSWITH ()
Entering state 80
Reading a token: Next token is token STRING ()
Shifting token STRING ()
Entering state 38
Reducing stack by rule 69 (line 227):
   $1 = token STRING ()
-> $$ = nterm expr ()
Stack now 0 1 16 21 51 80
Entering state 117
Reading a token: Next token is token THEN ()
Reducing stack by rule 56 (line 214):
   $1 = nterm expr ()
   $2 = token CMP_STARTSWITH ()
   $3 = nterm expr ()
-> $$ = nterm expr ()
Stack now 0 1 16 21
Entering state 51
Next token is token THEN ()
Shifting token THEN ()
Entering state 93
Reading a token: Next token is token LEGACY_ACTION ()
Shifting token LEGACY_ACTION ()
Entering state 14
Reducing stack by rule 40 (line 196):
   $1 = token LEGACY_ACTION ()
1246.608821379:main thread    : tried selector action for builtin:omfile: 0
1246.608826249:main thread    : Module builtin:omfile processes this action.
1246.608832769:main thread    : template: 'HAProxy' assigned
1246.608839288:main thread    : action 2 queue: parameter dump:
1246.608843884:main thread    : action 2 queue: queue.filename '[NONE]'
1246.608848317:main thread    : action 2 queue: queue.size: 1000
1246.608854068:main thread    : action 2 queue: queue.dequeuebatchsize: 16
1246.608858401:main thread    : action 2 queue: queue.maxdiskspace: 0
1246.608864022:main thread    : action 2 queue: queue.highwatermark: 800
1246.608868465:main thread    : action 2 queue: queue.lowwatermark: 200
1246.608874155:main thread    : action 2 queue: queue.fulldelaymark: -1
1246.608878472:main thread    : action 2 queue: queue.lightdelaymark: -1
1246.608883003:main thread    : action 2 queue: queue.discardmark: 980
1246.608887357:main thread    : action 2 queue: queue.discardseverity: 8
1246.608891722:main thread    : action 2 queue: queue.checkpointinterval: 0
1246.608896400:main thread    : action 2 queue: queue.syncqueuefiles: 0
1246.608900807:main thread    : action 2 queue: queue.type: 3 [Direct]
1246.608905190:main thread    : action 2 queue: queue.workerthreads: 1
1246.608909630:main thread    : action 2 queue: queue.timeoutshutdown: 0
1246.608913934:main thread    : action 2 queue: queue.timeoutactioncompletion: 1000
1246.608918354:main thread    : action 2 queue: queue.timeoutenqueue: 50
1246.608923102:main thread    : action 2 queue: queue.timeoutworkerthreadshutdown: 60000
1246.608927426:main thread    : action 2 queue: queue.workerthreadminimummessages: -1
1246.608931836:main thread    : action 2 queue: queue.maxfilesize: 1048576
1246.608936378:main thread    : action 2 queue: queue.saveonshutdown: 1
1246.608941434:main thread    : action 2 queue: queue.dequeueslowdown: 0
1246.608956263:main thread    : action 2 queue: queue.dequeuetimebegin: 0
1246.608961886:main thread    : action 2 queue: queue.dequeuetimeend: 25
1246.608966362:main thread    : Action 0x55a5e8cae020: queue 0x55a5e8cae450 created
-> $$ = nterm s_act ()
Stack now 0 1 16 21 51 93
Entering state 26
Reducing stack by rule 37 (line 192):
   $1 = nterm s_act ()
-> $$ = nterm actlst ()
Stack now 0 1 16 21 51 93
Entering state 25
Reading a token: Next token is token PRIFILT ()
Reducing stack by rule 24 (line 171):
   $1 = nterm actlst ()
-> $$ = nterm stmt ()
Stack now 0 1 16 21 51 93
Entering state 47
Reducing stack by rule 35 (line 190):
   $1 = nterm stmt ()
-> $$ = nterm block ()
Stack now 0 1 16 21 51 93
Entering state 129
Next token is token PRIFILT ()
Reducing stack by rule 25 (line 172):
   $1 = token IF ()
   $2 = nterm expr ()
   $3 = token THEN ()
   $4 = nterm block ()
-> $$ = nterm stmt ()
Stack now 0 1 16
Entering state 47
Reducing stack by rule 35 (line 190):
   $1 = nterm stmt ()
-> $$ = nterm block ()
Stack now 0 1 16
Entering state 48
Reducing stack by rule 31 (line 186):
   $1 = token PRIFILT ()
   $2 = nterm block ()
1246.609325444:main thread    : Decoding traditional PRI filter 'local2.notice'
1246.609330156:main thread    : symbolic name: notice ==> 5
1246.609338673:main thread    : symbolic name: local2 ==> 144
-> $$ = nterm stmt ()
Stack now 0 1
Entering state 24
Reducing stack by rule 3 (line 141):
   $1 = nterm conf ()
   $2 = nterm stmt ()
1246.609396701:main thread    : cnf:global:script
-> $$ = nterm conf ()
Stack now 0
Entering state 1
Next token is token PRIFILT ()
Shifting token PRIFILT ()
Entering state 16
Reading a token: Next token is token '&' ()
1246.609472900:main thread    : Called LogMsg, msg: error during parsing file /etc/rsyslog.d/49-haproxy.conf, on or before line 11: syntax error on token '&'
Segmentation fault
[root@db logrotate.d]# ls -lh /etc/rsyslog.d/
total 8.0K
-rw-r--r--. 1 root root 483 Mar 27 21:04 49-haproxy.conf
-rw-r--r--. 1 root root  49 Jan 14 00:54 listen.conf
[root@db logrotate.d]# 

Tapi yang menarik perhatian adalah di baris ini.

Reading a token: Next token is token '&' ()
1246.609472900:main thread    : Called LogMsg, msg: error during parsing file /etc/rsyslog.d/49-haproxy.conf, on or before line 11: syntax error on token '&'
Segmentation fault

Ada fail log configuration 49-haproxy.conf yang bermasalah. Jadi aku cuma move kan fail tersebut keluar dan restart service rsyslogd dan masalah selesai.

Indexing the Data from a centralized Rsyslog server into Splunk - Avotrix

Leave a Comment