This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Postgres errors filling logs, high cpu load

Hi there,

I realized, that our Firewalls are very slow due to CPU load of 97%-99% caused by filling-up system-log with postgres errors:

...

2016:07:26-15:14:40 firewall-1 postgres[30097]: [3-1] ERROR: function ins_websecurity(unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, integer, integer, integer, bigint) does not exist at character 8

2016:07:26-15:14:40 firewall-1 postgres[30097]: [3-2] HINT: No function matches the given name and argument types. You might need to add explicit type casts.
2016:07:26-15:14:40 firewall-1 postgres[30097]: [3-3] STATEMENT: select ins_websecurity($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14::int4, $15::int4, $16::int4, $17::int8)
...

...and so on, almost every 3 seconds

Checking the logs shows, that this error came up after Installing 9.402-7 (on May 13th 2016).
Right now the dual SG-230 HA system runs on actual 9.404-5

Any hints to correct this very quickly? 
I need more speed right now, because in 2 days, there will be the whole VOIP connect to the firewall... 

tnx and meeow!

Clyde



This thread was automatically locked due to age.
Parents
  • Although this will delete the data in the data bases and graphs, Clyde, it's the only way to fix your issue.  If you're uncomfortable doing this yourself, ask Sophos Support.  As root at the command line: /etc/init.d/postgresql92 rebuild

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi Bob,

    I was a little bit to fast with being happy :-)

    20 miutes after the database-rebuild, the Dashboard still shows 92-96% CPU load
    Weird: the postgres service, that was up to 35% before is low now (0.1%)
    The highest CPU load is marked by the syslog service (?) see below:

    root      5906 10.2  0.0  10456  6736 ?        Ss   07:10   9:05  \_ /usr/sbin/syslog-ng -f /etc/syslog-ng.conf


    But then again, system-log is still filled with :

    (...)

    2016:07:28-08:47:31 firewall-1 postgres[28239]: [3-1] ERROR: function ins_websecurity(unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, integer, integer, integer, bigint) does not exist at character 8

    2016:07:28-08:47:31 firewall-1 postgres[28240]: [3-1] ERROR: function ins_websecurity(unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, integer, integer, integer, bigint) does not exist at character 8
    2016:07:28-08:47:31 firewall-1 postgres[28240]: [3-2] HINT: No function matches the given name and argument types. You might need to add explicit type casts.

    (...)

    What's going wrong here? The high-cpu-load started after the upgrade to 9.402-7 months ago.
    Why is the cpu-load high on dashboard, when i can't see any service with high-load on the process-list?

    tnx

    Clyde

    __________________
    System-Administrator
    Astaro-User since Dez.2009
    2 x SG230-HA (Fw. V9.x)

  • Hi,

    This is a known issue, which is taken into consideration in NUTM- 3882. We are waiting for an update from the Dev Team on this instance.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Hi,

    Good to hear, that it's not my faulty configuration... :-)
    Cooler runs at 110%, so keep the Dev Team busy!

    tnx

    Clyde

    __________________
    System-Administrator
    Astaro-User since Dez.2009
    2 x SG230-HA (Fw. V9.x)

Reply Children
No Data