Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm running Natty server on the rackspace cloud and rsyslogd as been churning away usin 197% CPU (quad core machine I believe) for the past few days. Is there anything I can do to figure out what is going on?

share|improve this question
up vote 0 down vote accepted

I know this is old now but I had this issue on a Virtual private server I am running. It was Ubuntu server and I believe it was 10.10.

I found this page:

And it suggested to me a problem with the kernel so changed it to use the latest (through a web interface, the company is running Xen.) and that solved my problem.

This happened back in July 2011 (a couple of months ago) and I can't remember which version of the kernel I was using but now I'm using version 3.0.0...

share|improve this answer
Yeah, this turned out to be the problem. I ended up ditching the server and using Debian instead. – Jesse Oct 3 '11 at 7:15

On OpenVZ, rsyslog has a tendency to use 100%+ CPU. The following commands would fix the problem:

service rsyslog stop
sed -i -e 's/^\$ModLoad imklog/#\$ModLoad imklog/g' /etc/rsyslog.conf
service rsyslog start
share|improve this answer
Seems that a fix for this specific bug is on its way. See also the related bug report: – Torben Jan 7 '15 at 11:22

Jesse my go-to "WTF?" debugging method for something like this is strace.

Ctrl+C to exit these:

To see what its doing in real time:

sudo strace -p `pidof rsyslogd`

To see a summary of where it has been spending its time:

sudo strace -c -p `pidof rsyslogd`

There are some useful flags to these that will change their output some. man strace for more info.

share|improve this answer

This sounds like a bug report (that rsyslogd is not behaving as expected), please can you report it to the bug-tracker so that it can be tracked down and investigated with your help:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.