Solve the problem that rsyslog service occupies too much memory

  Catalog

One 、 summary

Two 、 screening

3、 ... and 、 terms of settlement

---

One 、 summary

Use top Command to view memory usage , Find out rsyslogd High memory footprint .

Two 、 screening

---

1、journalctl -u rsyslog Check the status

 2、tail /var/log/messages see messages journal

  perform journalctl --verify The command check found the system log volume file corruption error

3、 ... and 、 terms of settlement

---

1、 Delete the damaged above journal file
2、 Delete /var/lib/rsyslog/imjournal.state file
3、 modify rsyslogd Restart after the service configuration file rsyslog

vim /usr/lib/systemd/system/rsyslog.service

stay Service Add in configuration MemoryAccounting=yes,MemoryMax=80M,MemoryHigh=8M  Three to limit service memory usage , As shown below ：

[Unit]
Description=System Logging Service
;Requires=syslog.socket
Wants=network.target network-online.target
After=network.target network-online.target
Documentation=man:rsyslogd(8)
Documentation=http://www.rsyslog.com/doc/
 
[Service]
Type=notify
EnvironmentFile=-/etc/sysconfig/rsyslog
ExecStart=/usr/sbin/rsyslogd -n $SYSLOGD_OPTIONS
Restart=on-failure
UMask=0066
StandardOutput=null
Restart=on-failure
MemoryAccounting=yes
MemoryMax=80M
MemoryHigh=8M
 
[Install]
WantedBy=multi-user.target
;Alias=syslog.service

Usually rsyslogd The size is only 5M, So set the upper memory limit to 8M, Then limit the absolute memory to 80M.
Restart the service

systemctl daemon-reload
systemctl restart rsyslog

 --------------------------- Thank you for the compliment ！-------------------------------------