syslog-ng anf errdefsd service err

Hi yue_zheng1, 

The reason could be...

1. The errdefsd service is likely failing due to a corrupted or misconfigured log file, error definition file, or system logging configuration.
2. The constant restarts of errdefsd could trigger cascading issues, causing the mcpd process to utilize excessive resources while trying to maintain stability.
3. This could also lead to a feedback loop where syslog-ng and errdefsd interact incorrectly, generating an error storm.

Likely solutions....

• Clear Stale or Corrupted Logs:  - cd /var/log
  find . -type f -name '*.log' -size +500M -exec truncate -s 0 {} \; - 
  
  
• Check the Error Definition Files, - Review and validate the errdefsd configuration and error definition files -
  

   

  - cd /var/log
  find . -type f -name '*.log' -size +500M -exec truncate -s 0 {} \; -  || Ensure the file is not corrupted. If needed, restore it from a backup.
  
  

• Restart Services in Proper Order - Restart dependent services in this sequence - 
  • bigstart stop syslog-ng errdefsd
    bigstart start syslog-ng errdefsd
    bigstart restart mcpd

• Verify System Logs - Use journalctl to check for specific errors causing errdefsd restarts - 
  
  • journalctl -xe | grep errdefsd

If these do not work, reboot your device in maintenance window. 

Please let me know if it works.