[ZBX-26080] After log rotation, Zabbix continues to hold onto the old rotated file Created: 2025 Feb 21  Updated: 2025 Mar 28

Status: Merging
Project: ZABBIX BUGS AND ISSUES
Component/s: Agent (G), Agent2 (G), Proxy (P), Server (S)
Affects Version/s: 6.0.38
Fix Version/s: 5.0.47rc1, 6.0.40rc1, 7.0.12rc1, 7.2.6rc1, 7.4.0beta1 (master)

Type: Problem report Priority: Major
Reporter: Syusei YIn Assignee: Dmitrijs Goloscapovs
Resolution: Unresolved Votes: 1
Labels: agent, agent2, logrotate, logs
Remaining Estimate: Not Specified
Time Spent: 15h
Original Estimate: Not Specified

Issue Links:
Related
related to ZBX-16534 After log rotating by outer program, ... Closed
Team: Team A
Sprint: S25-W8/9, S25-W10/11, S25-W12/13, S25-W14/15
Story Points: 2

 Description   

Steps to reproduce:

  1. lsof of zabbix_agentd.log
    [root@centos8s logrotate.d]# lsof | grep zabbix_agentd.log
zabbix_ag    806                 zabbix    1w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    806                 zabbix    2w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    811                 zabbix    1w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    811                 zabbix    2w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    812                 zabbix    1w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    812                 zabbix    2w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    813                 zabbix    1w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    813                 zabbix    2w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    814                 zabbix    1w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    814                 zabbix    2w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    815                 zabbix    1w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    815                 zabbix    2w      REG              253,0      264398  268438529 /var/log/zabbix/zabbix_agentd.log
[root@centos8s logrotate.d]#
  2. logrotate with default logrotate rule
    [root@centos8s logrotate.d]# logrotate -f /etc/logrotate.d/zabbix-agent
  3. Zabbix continues to hold onto the old rotated file(zabbix_ag 806 zabbix 1w REG 253,0 264536 268438529 /var/log/zabbix/zabbix_agentd.log.1
    zabbix_ag 806 zabbix 2w REG 253,0 264536 268438529 /var/log/zabbix/zabbix_agentd.log.1)
    [root@centos8s logrotate.d]# lsof | grep zabbix_agentd.log
zabbix_ag    806                 zabbix    1w      REG              253,0      264536  268438529 /var/log/zabbix/zabbix_agentd.log.1
zabbix_ag    806                 zabbix    2w      REG              253,0      264536  268438529 /var/log/zabbix/zabbix_agentd.log.1
zabbix_ag    811                 zabbix    1w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    811                 zabbix    2w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    812                 zabbix    1w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    812                 zabbix    2w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    813                 zabbix    1w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    813                 zabbix    2w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    814                 zabbix    1w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    814                 zabbix    2w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    815                 zabbix    1w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
zabbix_ag    815                 zabbix    2w      REG              253,0           0  268438553 /var/log/zabbix/zabbix_agentd.log
[root@centos8s logrotate.d]#


 Comments   
Comment by dimir [ 2025 Feb 23 ]

Duplicate of ZBX-23813?

Comment by Vladislavs Sokurenko [ 2025 Mar 18 ]

It appears best workaround is to use copy truncate is it possible to try that instead yIn ?

Generated at Sun Mar 30 14:32:21 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.