[SOLVED] zmstat always down

[cailleaux]

Hi,

I have a problem with my Zimbra installation (6.0.5 64 bit openSource).

zmstat is always down :

$ zmcontrol status
Host mx.bbs-informatique.fr
        antispam                Running
        antivirus               Running
        ldap                    Running
        logger                  Running
        mailbox                 Running
        mta                     Running
        snmp                    Running
        spell                   Running
        stats                   Stopped

When I start it (zmstatctl stop && zmstatctl start as zimbra user), it starts, stays alive a couple of minutes and then goes down :

$ zmstatctl status
Running: zmstat-allprocs
Running: zmstat-fd
Running: zmstat-mysql
Running: zmstat-df
process 8141 in /opt/zimbra/zmstat/pid/zmstat-proc.pid not running
Running: zmstat-vm
Running: zmstat-mtaqueue
Running: zmstat-io-x
Running: zmstat-cpu
Running: zmstat-io

Note : in the above example, proc is down but it's random, it can be fd, proc, etc...

Does someone can help me to find where I can see logs, or anything that can guide me to solve out this issue ?

Thanks a lot !

[simonpope]

I have the identical problem - started at midnight last night. Recently upgraded to SLES 10 SP3 and zimbra 6.05. Has all worked fine for 2 weeks since upgrade.

Simon

[cailleaux]

I tried to run /opt/zimbra/libexec/zmstat-proc manually in order to see what happens...

It's random, sometimes it hangs after 10 secondes, sometimes after 20 minutes. But always the same return code : 141, which normally mean it received a SIGPIPE....

But why ? very strange...

Edit : I ran it with perl -d, it seems to always fail on the same position :

392:            if ($syslog_send) {
Sys::Syslog::syslog(/usr/lib/perl/5.10/Sys/Syslog.pm:393):
393:                if ($syslog_send->($buf, $numpri, $numfac)) {
Sys::Syslog::_syslog_send_socket(/usr/lib/perl/5.10/Sys/Syslog.pm:450):
450:        my ($buf) = @_;
Sys::Syslog::_syslog_send_socket(/usr/lib/perl/5.10/Sys/Syslog.pm:451):
451:        return syswrite(SYSLOG, $buf, length($buf));

[uxbod]

Are you running syslog or rsyslog ?

[cailleaux]

Ok, I finally found what's wrong... It's good to talk here !

The problem was in the syslog-ng.conf :

unix-stream("/dev/log"
            keep-alive(yes)
            max-connections(20)
           );

I changed 20 into the default value, 256, and the problem is gone

Hope this will help someone

Thanks !