maillog stops logging?

Tue Feb 9 17:23:44 UTC 2016

maillog stopped again!

3 log files stopped at the same time on Feb 7 13:45.They are maillog, 
messages and cron. Some log files still logging, such as httpd/*.log,  
sa-update.log, clamd.scan.,etc.

Check journald found file corruption:

# journalctl --verify
1f46d38: unused data (entry_offset==0)
1f46d88: invalid object
File corruption detected at 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system.journal:1f46d88 
(of 33554432 bytes, 97%).
FAIL: /run/log/journal/822abf3b38544afcb5346a734f08a553/system.journal 
(Cannot assign requested address)
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-0000000000049c09-00052afaace2a075.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-00000000000409e2-00052ae4cec55f11.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-000000000003771a-00052acccca1c11e.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-000000000002e697-00052ab68d5d1e25.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-000000000002516e-00052a911a3bf907.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-000000000001be5a-00052a72742a9b9c.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-00000000000129c9-00052a5ac245cb21.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-000000000000959b-00052a426579c337.journal
PASS: 
/run/log/journal/822abf3b38544afcb5346a734f08a553/system at 42c98256198545c485bbd99e9e589bf5-0000000000000001-00052a2b501c1ac9.journal

This time I fix the issue without restart my server. I just remove the 
corrupted file and restart the journald then the maillog back to work:

cd /run/log/journal/822abf3b38544afcb5346a734f08a553/
mv system.journal system.journal.bak
systemctl restart systemd-journald

Now it created a new system.journal file automatically. Run "journalctl 
--verify" shows all PASS. Check maillog it works fine now.

Gao

On 16-01-28 11:35 AM, Jerry Benton wrote:
> Gao,
>
> If you see this issue again, please tell me. I am really hoping that update you did contained the correction to the problem and it is not a problem with how Perl logs.
>
> -
> Jerry Benton
> www.mailborder.com
>
>
>
>> On Jan 28, 2016, at 11:57 AM, Gao <gao at pztop.com> wrote:
>>
>> I had this issue as well.
>>
>> I am using CentOS 7.2  64bit and during the last month maillog stopped twice without any reason. When the maillog stops, message log also stopped. But other log (secure, fail2ban.,etc) keep working. I also have MailWatch on the same box and MailScanner still send records to MailWatch.
>>
>> I tried to restart rsyslogd and MailScanner and that didn't bring the logging back. I have to reboot the server then everything back to normal.
>>
>> Last time the maillog stopped is a week ago. I did a full "yum update" and reboot. So far the maillog is working well. Not sure what happened. I still have my finger crossed...
>>
>> Gao
>>
>>
>>
>> On 16-01-28 04:17 AM, Jerry Benton wrote:
>>> What OS are you using?
>>>
>>> -
>>> Jerry Benton
>>> www.mailborder.com
>>>
>>>
>>>
>>>> On Jan 28, 2016, at 7:16 AM, Walt Thiessen <wt at dld2000.com> wrote:
>>>>
>>>> My server at /etc/init.d/ doesn't have a file named rsyslog.
>>>>
>>>> Here's an ls -l for /etc/init.d/
>>>>
>>>>
>>>> drwxr-xr-x.  2 root root   4096 Jan 27 21:11 ./
>>>> drwxr-xr-x. 10 root root   4096 Jan 27 21:11 ../
>>>> -rwxr--r--.  1 root wheel  1151 Feb 25  2015 bandmin*
>>>> -rw-r--r--.  1 root root  12972 Oct 10 00:07 cpfunctions
>>>> -rwxr-xr-x   1 root root   2502 Dec 16 11:06 dovecot*
>>>> -rwxr-xr-x   1 root root   1067 Jan 27 21:11 filelimits*
>>>> -rw-r--r--   1 root root  13948 Sep 16 07:51 functions
>>>> -rwxr-xr-x   1 root root   2989 Sep 16 07:51 netconsole*
>>>> -rwxr-xr-x   1 root root   6630 Sep 16 07:51 network*
>>>> -rw-r--r--   1 root root   1160 Nov 19 23:49 README
>>>>
>>>>
>>>> On 1/28/2016 7:09 AM, Jerry Benton wrote:
>>>>> /etc/init.d/rsyslog restart
>>>>>
>>>>> maybe?
>>>>>
>>>>> -
>>>>> Jerry Benton
>>>>> www.mailborder.com
>>>>>
>>>>>
>>>>>
>>>>>> On Jan 28, 2016, at 7:08 AM, Walt Thiessen <wt at dld2000.com> wrote:
>>>>>>
>>>>>> Correct
>>>>>>
>>>>>> On 1/28/2016 7:05 AM, Jerry Benton wrote:
>>>>>>> Both the MTA and MailScanner are not logging to it?
>>>>>>>
>>>>>>> -
>>>>>>> Jerry Benton
>>>>>>> www.mailborder.com
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> On Jan 28, 2016, at 7:04 AM, Walt Thiessen <wt at dld2000.com> wrote:
>>>>>>>>
>>>>>>>> For some unknown reason, my /var/log/maillog stopped recording entries
>>>>>>>> two days ago. There's plenty of available storage on the server ... only
>>>>>>>> about 9% has been used.
>>>>>>>>
>>>>>>>> Exim_mainlog continues to record entries, but not maillog.
>>>>>>>>
>>>>>>>> MailScanner continues to scan emails. I can see the results of it in
>>>>>>>> delivered emails' message source. X-org-name-MailScanner-Information
>>>>>>>> shows up in the message source.
>>>>>>>>
>>>>>>>> Is there some way to turn maillog off and on that I should check?
>>>>>>>>
>>>>>>>> Walt Thiessen
>>>>>>>>
>>>>>>>>
>>>>>>>> -- 
>>>>>>>> MailScanner mailing list
>>>>>>>> mailscanner at lists.mailscanner.info
>>>>>>>> http://lists.mailscanner.info/listinfo/mailscanner
>>>>>>>>
>>>>>>>
>>>>>> -- 
>>>>>> MailScanner mailing list
>>>>>> mailscanner at lists.mailscanner.info
>>>>>> http://lists.mailscanner.info/listinfo/mailscanner
>>>>>>
>>>>>
>>>> -- 
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/listinfo/mailscanner
>>>>
>>>
>>
>>
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/listinfo/mailscanner
>>
>
>