syslog_tls too many open files | Log collection solutions

#1 lmpardey 5 years ago

There is a bug in NXLog Community Edition 2.10.2150, with module im_ssl regarding opening CA files.

NXLog seems to create a file descriptor for the CA file each time a new connection is made. That is, NXLog opens the file again and again. If NXLog runs on Linux, this can quickly hit the OS limit of maximum number of files open.

The following error is seen repeatedly once the OS limit of file descriptors is reached:

ERROR SSL error, failed to load ca cert from '<path_to_file>', Too many open files

Raising the OS limit is only a temporary solution: eventually, the next limit can be hit

How can this bug be fixed?

Permalink

#2 Zhengshi Nxlog ✓ 5 years ago

#1 lmpardey

There is a bug in NXLog Community Edition 2.10.2150, with module im_ssl regarding opening CA files. NXLog seems to create a file descriptor for the CA file each time a new connection is made. That is, NXLog opens the file again and again. If NXLog runs on Linux, this can quickly hit the OS limit of maximum number of files open. The following error is seen repeatedly once the OS limit of file descriptors is reached: ERROR SSL error, failed to load ca cert from '<path_to_file>', Too many open files Raising the OS limit is only a temporary solution: eventually, the next limit can be hit How can this bug be fixed?

Thank you for raising this.
I have created an internal issue to investigate this.