Rastream doesn't rotate properly when daemonied?

Carter Bullard carter at qosient.com
Tue May 21 10:48:58 EDT 2013


Yes you have to compile in debug support.  We should turn on symbols, etc... as well.  In the clients root directory, try this:

% touch .devel .debug
% ./configure
% make clean; make

And use the resulting binaries for the testing.
Carter

On May 21, 2013, at 10:08 AM, Matt Brown <matthewbrown at gmail.com> wrote:

> Carter,
> 
> Do settings need to be changed at compile time in order to get debugging features?  I have started with -D4 and only the start time and forked time are logged.  I have confirmed that rastream is appending to the proper file.
> 
> 
> Just to let you know *latest* is still 3.0.7.9, not 3.0.7.10.
> 
> 
> Thanks very much!
> 
> Matt
> 
> On May 21, 2013, at 9:55 AM, Carter Bullard <carter at qosient.com> wrote:
> 
>> Try the newest client distribution, just to see if any of the changes we
>> made to date affect the problem.  This may be a tough one to debug,
>> but if I can recreate the issue, then we're on our way to happiness.
>> 
>> We'll need you to turn on debug on your daemon, the output should
>> go to the syslog, so testing that briefly may help a bit.  Run your rastream
>> with the "-d -D4" options, and see if you get any debug info in your syslog.
>> 
>> Carter 
>> 
>> On May 21, 2013, at 9:48 AM, Matt Brown <matthewbrown at gmail.com> wrote:
>> 
>>> Good morning Carter!
>>> 
>>>  
>>> I wrote an init script and had some issues when starting rastream with the script targetting ~/.rarc even if I set $ARGUSHOME or $HOME within the script (on CentOS) (due to service's use of /bin/env).
>>>  
>>>  
>>> So, the line I use within the init script is:
>>>  
>>> /usr/local/bin/rastream -d -F /etc/rastream.conf -S 127.0.0.1:561 -B 15s -M time 1h -w /var/opt/argus/%Y-%m-%d/argus_%T -f /usr/local/bin/rastream.sh
>>>  
>>> The same problem with timing occurs as had previously occur when relying on the full ~/.rarc.
>>>  
>>>  
>>> Here is an etherpad with relevant information:https://etherpad.mozilla.org/dmoSdfQ9H4
>>>  
>>> # rastream --version
>>> Rastream Version 3.0.7.9
>>>  
>>>  
>>> Thanks very much Carter!
>>>  
>>> Matt
>>> 
>>> On May 21, 2013, at 6:44 AM, Carter Bullard <carter at qosient.com> wrote:
>>> 
>>>> 
>>>> Hey Matt,
>>>> So.......any chance you are setting the timezine in a rarc file somewhere, like /etc/rarc or in your yme directory ?
>>>> What version are you running ?
>>>> 
>>>> Carter
>>>> 
>>>> On May 20, 2013, at 2:42 PM, Matt Brown <matthewbrown at gmail.com> wrote:
>>>> 
>>>>> Hello All:
>>>>>  
>>>>>  
>>>>> I am having a problem with rastream that's manifested itself when using the -f "shell script executor" argument to rotate files at 'time 1h'.
>>>>>  
>>>>>  
>>>>> If I run rastream as a daemon, then the script seems to run before the "hour" is over (and the "hour" is over at the incorrect time):
>>>>> # rastream -d -S 127.0.0.1:561 -B 15s -M time 1h -w /var/opt/argus/%Y-%m-%d/argus_%T -f /usr/local/bin/rastream.sh
>>>>>  
>>>>> A few hours' files look like:
>>>>>  
>>>>> # ls --full-time /var/opt/argus/2013-05-18
>>>>> total 3728
>>>>> -rw-r--r--. 1 root  18752 2013-05-18 01:00:59.556839459 -0400 argus_00:00:00
>>>>> -rw-r--r--. 1 root 160607 2013-05-18 01:00:17.793286000 -0400 argus_00:00:00.gz
>>>>> -rw-r--r--. 1 root  12068 2013-05-18 02:00:59.619364943 -0400 argus_01:00:00
>>>>> -rw-r--r--. 1 root 163409 2013-05-18 02:00:17.943700000 -0400 argus_01:00:00.gz
>>>>> -rw-r--r--. 1 root   9032 2013-05-1803:01:00.579907536 -0400 argus_02:00:00
>>>>> -rw-r--r--. 1 root 122920 2013-05-18 03:00:17.834317000 -0400 argus_02:00:00.gz
>>>>> -rw-r--r--. 1 root  22092 2013-05-18 04:01:00.698357771 -0400 argus_03:00:00
>>>>> -rw-r--r--. 1 root 122002 2013-05-18 04:00:17.835675000 -0400 argus_03:00:00.gz
>>>>> -rw-r--r--. 1 root  17704 2013-05-18 05:01:00.450618851 -0400 argus_04:00:00
>>>>> -rw-r--r--. 1 root 133212 2013-05-18 05:00:17.742040000 -0400 argus_04:00:00.gz
>>>>> -rw-r--r--. 1 root  14592 2013-05-18 06:00:54.886285774 -0400 argus_05:00:00
>>>>> -rw-r--r--. 1 root 160523 2013-05-18 06:00:17.562776000 -0400 argus_05:00:00.gz
>>>>>  
>>>>> It looks like the gzipped file is last modified before the hour file, which leads me to believe that rastream isn't finished writing to the argus file before -f[] is executed.
>>>>>  
>>>>>  
>>>>> If I run rastream as follows, I have no problem:
>>>>> # nohup rastream -S 127.0.0.1:561 -B 15s -M time 1h -w /var/opt/argus/%Y-%m-%d/argus_%T -f /usr/local/bin/rastream.sh &
>>>>>  
>>>>> A few hours' files look like:
>>>>>  
>>>>> #  ls --full-time /var/opt/argus/2013-05-20
>>>>> total 5372
>>>>> -rw-r--r--. 1 root 217245 2013-05-20 10:00:17.573908000 -0400 argus_09:00:00.gz
>>>>> -rw-r--r--. 1 root   6377 2013-05-2011:00:17.762140000 -0400 argus_10:00:00.gz
>>>>> -rw-r--r--. 1 root   9269 2013-05-2011:38:08.879810000 -0400 argus_11:00:00.gz
>>>>> -rw-r--r--. 1 root    313 2013-05-2013:00:17.170958000 -0400 argus_12:00:00.gz
>>>>> -rw-r--r--. 1 root   8965 2013-05-2014:00:17.540889000 -0400 argus_13:00:00.gz
>>>>>  
>>>>> (early day over there)
>>>>>  
>>>>>  
>>>>>  
>>>>> I have verified that the system time is correct and ntpd is running properly.
>>>>>  
>>>>> Clients are 3.0.7.9.
>>>>>  
>>>>>  
>>>>> Carter, do you have any ideas?
>>>>>  
>>>>>  
>>>>> Thanks,
>>>>>  
>>>>> Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130521/02347518/attachment.html>


More information about the argus mailing list