Rastream doesn't rotate properly when daemonied?
Carter Bullard
carter at qosient.com
Tue May 21 10:48:58 EDT 2013
Yes you have to compile in debug support. We should turn on symbols, etc... as well. In the clients root directory, try this:
% touch .devel .debug
% ./configure
% make clean; make
And use the resulting binaries for the testing.
Carter
On May 21, 2013, at 10:08 AM, Matt Brown <matthewbrown at gmail.com> wrote:
> Carter,
>
> Do settings need to be changed at compile time in order to get debugging features? I have started with -D4 and only the start time and forked time are logged. I have confirmed that rastream is appending to the proper file.
>
>
> Just to let you know *latest* is still 3.0.7.9, not 3.0.7.10.
>
>
> Thanks very much!
>
> Matt
>
> On May 21, 2013, at 9:55 AM, Carter Bullard <carter at qosient.com> wrote:
>
>> Try the newest client distribution, just to see if any of the changes we
>> made to date affect the problem. This may be a tough one to debug,
>> but if I can recreate the issue, then we're on our way to happiness.
>>
>> We'll need you to turn on debug on your daemon, the output should
>> go to the syslog, so testing that briefly may help a bit. Run your rastream
>> with the "-d -D4" options, and see if you get any debug info in your syslog.
>>
>> Carter
>>
>> On May 21, 2013, at 9:48 AM, Matt Brown <matthewbrown at gmail.com> wrote:
>>
>>> Good morning Carter!
>>>
>>>
>>> I wrote an init script and had some issues when starting rastream with the script targetting ~/.rarc even if I set $ARGUSHOME or $HOME within the script (on CentOS) (due to service's use of /bin/env).
>>>
>>>
>>> So, the line I use within the init script is:
>>>
>>> /usr/local/bin/rastream -d -F /etc/rastream.conf -S 127.0.0.1:561 -B 15s -M time 1h -w /var/opt/argus/%Y-%m-%d/argus_%T -f /usr/local/bin/rastream.sh
>>>
>>> The same problem with timing occurs as had previously occur when relying on the full ~/.rarc.
>>>
>>>
>>> Here is an etherpad with relevant information:https://etherpad.mozilla.org/dmoSdfQ9H4
>>>
>>> # rastream --version
>>> Rastream Version 3.0.7.9
>>>
>>>
>>> Thanks very much Carter!
>>>
>>> Matt
>>>
>>> On May 21, 2013, at 6:44 AM, Carter Bullard <carter at qosient.com> wrote:
>>>
>>>>
>>>> Hey Matt,
>>>> So.......any chance you are setting the timezine in a rarc file somewhere, like /etc/rarc or in your yme directory ?
>>>> What version are you running ?
>>>>
>>>> Carter
>>>>
>>>> On May 20, 2013, at 2:42 PM, Matt Brown <matthewbrown at gmail.com> wrote:
>>>>
>>>>> Hello All:
>>>>>
>>>>>
>>>>> I am having a problem with rastream that's manifested itself when using the -f "shell script executor" argument to rotate files at 'time 1h'.
>>>>>
>>>>>
>>>>> If I run rastream as a daemon, then the script seems to run before the "hour" is over (and the "hour" is over at the incorrect time):
>>>>> # rastream -d -S 127.0.0.1:561 -B 15s -M time 1h -w /var/opt/argus/%Y-%m-%d/argus_%T -f /usr/local/bin/rastream.sh
>>>>>
>>>>> A few hours' files look like:
>>>>>
>>>>> # ls --full-time /var/opt/argus/2013-05-18
>>>>> total 3728
>>>>> -rw-r--r--. 1 root 18752 2013-05-18 01:00:59.556839459 -0400 argus_00:00:00
>>>>> -rw-r--r--. 1 root 160607 2013-05-18 01:00:17.793286000 -0400 argus_00:00:00.gz
>>>>> -rw-r--r--. 1 root 12068 2013-05-18 02:00:59.619364943 -0400 argus_01:00:00
>>>>> -rw-r--r--. 1 root 163409 2013-05-18 02:00:17.943700000 -0400 argus_01:00:00.gz
>>>>> -rw-r--r--. 1 root 9032 2013-05-1803:01:00.579907536 -0400 argus_02:00:00
>>>>> -rw-r--r--. 1 root 122920 2013-05-18 03:00:17.834317000 -0400 argus_02:00:00.gz
>>>>> -rw-r--r--. 1 root 22092 2013-05-18 04:01:00.698357771 -0400 argus_03:00:00
>>>>> -rw-r--r--. 1 root 122002 2013-05-18 04:00:17.835675000 -0400 argus_03:00:00.gz
>>>>> -rw-r--r--. 1 root 17704 2013-05-18 05:01:00.450618851 -0400 argus_04:00:00
>>>>> -rw-r--r--. 1 root 133212 2013-05-18 05:00:17.742040000 -0400 argus_04:00:00.gz
>>>>> -rw-r--r--. 1 root 14592 2013-05-18 06:00:54.886285774 -0400 argus_05:00:00
>>>>> -rw-r--r--. 1 root 160523 2013-05-18 06:00:17.562776000 -0400 argus_05:00:00.gz
>>>>>
>>>>> It looks like the gzipped file is last modified before the hour file, which leads me to believe that rastream isn't finished writing to the argus file before -f[] is executed.
>>>>>
>>>>>
>>>>> If I run rastream as follows, I have no problem:
>>>>> # nohup rastream -S 127.0.0.1:561 -B 15s -M time 1h -w /var/opt/argus/%Y-%m-%d/argus_%T -f /usr/local/bin/rastream.sh &
>>>>>
>>>>> A few hours' files look like:
>>>>>
>>>>> # ls --full-time /var/opt/argus/2013-05-20
>>>>> total 5372
>>>>> -rw-r--r--. 1 root 217245 2013-05-20 10:00:17.573908000 -0400 argus_09:00:00.gz
>>>>> -rw-r--r--. 1 root 6377 2013-05-2011:00:17.762140000 -0400 argus_10:00:00.gz
>>>>> -rw-r--r--. 1 root 9269 2013-05-2011:38:08.879810000 -0400 argus_11:00:00.gz
>>>>> -rw-r--r--. 1 root 313 2013-05-2013:00:17.170958000 -0400 argus_12:00:00.gz
>>>>> -rw-r--r--. 1 root 8965 2013-05-2014:00:17.540889000 -0400 argus_13:00:00.gz
>>>>>
>>>>> (early day over there)
>>>>>
>>>>>
>>>>>
>>>>> I have verified that the system time is correct and ntpd is running properly.
>>>>>
>>>>> Clients are 3.0.7.9.
>>>>>
>>>>>
>>>>> Carter, do you have any ideas?
>>>>>
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130521/02347518/attachment.html>
More information about the argus
mailing list