Logger stops when status is queried during cronjob?

[fcolpron]

Hi,

We're running ZCS NE 5.0.16 on SLES10 SP2 64 bits. It's a brand new setup at our client's premise. We're smoothly migrating 20-something users from Netmail.

My issue is: from time to time, we receive in an email in the admin's inbox saying that the logger service has stopped. It happened twice so far.

When I look at /var/log/messages and /var/log/zimbra.log I learn a couple of interesting things. I copy & pasted them below. I removed some irrelevant entries from these logs. The string "courriel" is our ZCS server's internal hostname.

It's my understanding that some admin connected to ZCS through SSH and made some monitoring while cronjobs were processing logs. For some reason, syslog-ng (which apparently ZCS logger relies on) stops and an alert is sent. A few seconds later, logger service is running normally.

First, is my understanding right?
Second, what happens more precisely (I don't quite understand)?
Third, is there a way for us to fix this?

Thanks,

Here we go with the logs:

Aug 10 13:28:56 courriel sudo: zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmailboxdmgr status
Aug 10 13:28:56 courriel sudo: zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmtastatus
Aug 10 13:28:57 courriel sudo: zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmailboxdmgr status
Aug 10 13:30:01 courriel /usr/sbin/cron[26027]: (zimbra) CMD (/opt/zimbra/libexec/zmlogprocess > /tmp/logprocess.out 2>&1)
Aug 10 13:30:01 courriel /usr/sbin/cron[26030]: (zimbra) CMD (/opt/zimbra/libexec/zmcheckduplicatemysqld -e > /dev/null 2>&1)
Aug 10 13:30:01 courriel /usr/sbin/cron[26034]: (zimbra) CMD (/opt/zimbra/libexec/zmdisklog)
Aug 10 13:30:01 courriel /usr/sbin/cron[26037]: (zimbra) CMD (/opt/zimbra/libexec/zmstatuslog)
Aug 10 13:30:01 courriel /usr/sbin/cron[26040]: (zimbra) CMD (/opt/zimbra/libexec/zmqueuelog)
Aug 10 13:30:01 courriel zimbramon[26040]: 26040:info: 2009-08-10 13:30:01, QUEUE: 50 4
Aug 10 13:30:01 courriel syslog-ng[1944]: SIGHUP received, restarting syslog-ng
Aug 10 13:30:02 courriel zimbramon[26034]: 26034:info: 2009-08-10 13:30:01, DISK: courriel.efficom.qc.ca: dev: /dev/xvda3, mp: /, tot: 22677, avail: 18503
Aug 10 13:30:02 courriel syslog-ng[1944]: new configuration initialized
Aug 10 13:30:04 courriel syslog-ng[1944]: SIGHUP received, restarting syslog-ng
Aug 10 13:30:04 courriel sudo: zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmailboxdmgr status
Aug 10 13:30:05 courriel sudo: zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmtastatus
Aug 10 13:30:05 courriel syslog-ng[1944]: new configuration initialized
Aug 10 13:30:05 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: antispam: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: antivirus: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: convertd: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: ldap: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: logger: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: mailbox: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: mta: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: snmp: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: spell: Running
Aug 10 13:30:06 courriel zimbramon[26037]: 26037:info: 2009-08-10 13:30:01, STATUS: courriel.efficom.qc.ca: stats: Running
Aug 10 13:30:07 courriel syslog-ng[1944]: SIGHUP received, restarting syslog-ng
Aug 10 13:30:08 courriel syslog-ng[1944]: Changing permissions on special file /dev/xconsole
Aug 10 13:30:08 courriel syslog-ng[1944]: Changing permissions on special file /dev/tty10
Aug 10 13:30:08 courriel zimbramon[16866]: 16866:err: Service status change: courriel.efficom.qc.ca snmp changed from running to stopped
Aug 10 13:30:08 courriel syslog-ng[1944]: new configuration initialized
Aug 10 13:30:08 courriel sudo: zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmailboxdmgr status
Aug 10 13:30:08 courriel sudo: zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmtastatus
Aug 10 13:30:08 courriel su: (to zimbra) root on none
Aug 10 13:30:09 courriel sudo: zimbra : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmailboxdmgr status
Aug 10 13:30:09 courriel syslog-ng[1944]: Changing permissions on special file /dev/xconsole
Aug 10 13:30:09 courriel syslog-ng[1944]: Changing permissions on special file /dev/tty10
Aug 10 13:30:09 courriel zimbramon[16866]: 16866:err: Service status change: courriel.efficom.qc.ca logger changed from running to stopped
Aug 10 13:30:12 courriel su: (to zimbra) root on none
Aug 10 13:30:14 courriel su: (to zimbra) root on none
Aug 10 13:30:15 courriel su: (to zimbra) root on none
Aug 10 13:30:17 courriel su: (to zimbra) root on none
Aug 10 13:30:17 courriel su: (to zimbra) root on none
Aug 10 13:30:19 courriel zimbramon[27524]: 27524:info: zmmtaconfig: zmmtaconfig started on courriel.efficom.qc.ca with loglevel=3 pid=27524