messages logs flooded with sd messages after applying 8.0.2.2300 on RHEL 9

book

Article ID: 100072892

calendar_today

Updated On:

Description

Error Message

Nov 12 07:54:40 server101 kernel: sdk: sdk3 sdk8
Nov 12 07:54:40 server101 kernel: sdad: sdad3 sdad8
Nov 12 07:54:40 server101 kernel: sdai: sdai3 sdai8
Nov 12 07:54:40 server101 kernel: sdi: sdi3 sdi8
Nov 12 07:54:40 server101 kernel: sdaj: sdaj3 sdaj8
Nov 12 07:54:40 server101 kernel: sdao: sdao3 sdao8
Nov 12 07:54:40 server101 kernel: sdl: sdl3 sdl8

Cause

Starting from RHEL 9 and above, the block layer has been refactored. Red Hat required Veritas to move the revalidate_disk() function into device open() to ensure compatibility with current and future RHEL 9 kernels. These changes were introduced in the 8.0.2.2300 patch. Any activity that triggers device open(), such as IOCTLs, will invoke the revalidate_disk() function. This function will trigger partition information logs (OS code) in /var/log/messages.outlined in the following Redhat technote:

"Kernel: sxX:sdX1" message in RHEL7

Red Hat has stated that these logs are not harmful. A long-term solution to suppress these logs is being developed in collaboration with Red Hat.

 

Resolution

These messages can be filtered using rsyslogd and either eliminated or redirected to an alternative log. i.e.

1. cd /etc/rsyslog.d

2. Create a new configuration file

vi partition-filter.conf

3. Add the following to stop these messages being reported:

if $syslogfacility-text == 'kern' and $msg contains "sd" and $msg contains ":" then stop

4. Alternatively, they can be redirected to a different log file.

if $syslogfacility-text == 'kern' and $msg contains "sd" and $msg contains ":" then /var/log/filterlog.log

5. Restart rsyslogd.

systemctl restart rsyslogd

6. In the event that these messages are redirected to an alternative log file, it is recommended that logrotate is used to limit the amount of log data accumulated. Example

a. cd /etc/logrotate.d

b. vi filterlog

/var/log/filterlog.log {
    daily
    compress
    dateext
    maxage 365
    rotate 7
    notifempty
    olddir /var/log/
    missingok
    copytruncate
}

 

This will rotate the logs on a daily basis, compress them and retain them for 1 week. See the logrotate man page for further details.

 

Issue/Introduction

After applying the 8.0.2.2300 patch on RHEL 9, the messages logs are flooded with device path messages