[Bug 2003105] [NEW] rsyslog fills the root filesystem by spamming messages

[Michał J. Gajda]

Public bug reported:

Today, I lost some of my data.
I had a file open in Vim, and lost it, since rsyslog quickly produced over 450GB on 1TB root filesystem within a day.
It should correctly limit the log spam by default, but instead it creates its own log file.
Since it is installed by other software, end user is surprised when is root filesystem is filled with useless messages.

In my case the messages came from `snap` for desktop integration
continuously restarting for unknown reasons.

journald and `printk` limit rate of log spamming by default just to
prevent data loss for the same reason.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: rsyslog (not installed)
ProcVersionSignature: Ubuntu 5.15.0-57.63-lowlatency 5.15.74
Uname: Linux 5.15.0-57-lowlatency x86_64
ApportVersion: 2.20.11-0ubuntu82.3
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Tue Jan 17 18:37:49 2023
InstallationDate: Installed on 2022-11-08 (70 days ago)
InstallationMedia: Ubuntu 22.04.1 LTS "Jammy Jellyfish" - Release amd64 (20220809.1)
SourcePackage: rsyslog
UpgradeStatus: No upgrade log present (probably fresh install)
modified.conffile..etc.logrotate.d.rsyslog: [deleted]

** Affects: rsyslog (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug jammy

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/2003105

Title:
  rsyslog fills the root filesystem by spamming messages

Status in rsyslog package in Ubuntu:
  New

Bug description:
  Today, I lost some of my data.
  I had a file open in Vim, and lost it, since rsyslog quickly produced over 450GB on 1TB root filesystem within a day.
  It should correctly limit the log spam by default, but instead it creates its own log file.
  Since it is installed by other software, end user is surprised when is root filesystem is filled with useless messages.

  In my case the messages came from `snap` for desktop integration
  continuously restarting for unknown reasons.

  journald and `printk` limit rate of log spamming by default just to
  prevent data loss for the same reason.

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: rsyslog (not installed)
  ProcVersionSignature: Ubuntu 5.15.0-57.63-lowlatency 5.15.74
  Uname: Linux 5.15.0-57-lowlatency x86_64
  ApportVersion: 2.20.11-0ubuntu82.3
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Tue Jan 17 18:37:49 2023
  InstallationDate: Installed on 2022-11-08 (70 days ago)
  InstallationMedia: Ubuntu 22.04.1 LTS "Jammy Jellyfish" - Release amd64 (20220809.1)
  SourcePackage: rsyslog
  UpgradeStatus: No upgrade log present (probably fresh install)
  modified.conffile..etc.logrotate.d.rsyslog: [deleted]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/2003105/+subscriptions