Information: Forum is in read-only mode
For details and other support options see

Too many open files

This is the place for you, if you got rsyslog up and running but wonder how to make it do what you want.

Moderator: alorbach

Google Ads

Too many open files

Postby uppsalanet » Mon Aug 28, 2017 3:16 pm

Lately we have run into a problem with rsyslog saying we have "Too many open files" and it stops logging.
Code: Select all
2017-08-27T03:41:01.088101+02:00 its-srv015 rsyslogd-2433: file '/syslog/20170827/its-srv015/': open error: Too many open files [v8.28.0.master try ]

It stops writing files to disk.

Some ulimits
Code: Select all
[root@its-srvxxx log]# cat /proc/sys/fs/file-max
[root@its-srvxxx log]# ulimit -Hn
[root@its-srvxxx log]# ulimit -Sn

rsyslogd process:
Code: Select all
[root@its-srvxxx log]# cat /proc/10135/limits
Limit                     Soft Limit           Hard Limit           Units     
Max cpu time              unlimited            unlimited            seconds   
Max file size             unlimited            unlimited            bytes     
Max data size             unlimited            unlimited            bytes     
Max stack size            8388608              unlimited            bytes     
Max core file size        0                    unlimited            bytes     
Max resident set          unlimited            unlimited            bytes     
Max processes             382581               382581               processes
Max open files            1024                 4096                 files     
Max locked memory         65536                65536                bytes     
Max address space         unlimited            unlimited            bytes     
Max file locks            unlimited            unlimited            locks     
Max pending signals       382581               382581               signals   
Max msgqueue size         819200               819200               bytes     
Max nice priority         0                    0                   
Max realtime priority     0                    0                   
Max realtime timeout      unlimited            unlimited            us

I have not declared any "MaxOpenFiles" in rsyslog.comf. The server is a really powerful machine and it runs version:
Code: Select all
rsyslogd 8.28.0.master, compiled with:
   PLATFORM:            x86_64-redhat-linux-gnu
   PLATFORM (lsb_release -d):      
   FEATURE_REGEXP:            Yes
   GSSAPI Kerberos 5 support:      No
   FEATURE_DEBUG (debug build, slow code):   No
   32bit Atomic operations supported:   Yes
   64bit Atomic operations supported:   Yes
   memory allocator:         system default
   Runtime Instrumentation (slow code):   No
   uuid support:            Yes
   Number of Bits in RainerScript integers: 64

Hope someone can push me into right direction, thanks in advance.
Posts: 18
Joined: Thu Apr 28, 2016 9:09 am

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Re: Too many open files

Postby uppsalanet » Tue Aug 29, 2017 9:05 am

Found some documentation regarding "max open files":

I've now added "$MaxOpenFiles 8000" to the top of the configuration file and after restart rsyslogd i checked /proc/$$/limits and it says:
Code: Select all
Limit                     Soft Limit           Hard Limit           Units
Max open files            8000                 8000                 files

I cant find the configuration parameter for the "new" rsyslog.comf written in rainerscript? But putting it in the beginning of the file works.

Posts: 18
Joined: Thu Apr 28, 2016 9:09 am

Google Ads

Return to Configuration

Who is online

Users browsing this forum: No registered users and 4 guests