IBM Support

PM78144: IBM HTTP SERVER LARGE LOGFORMATS CANNOT BE CORRECTLY LOGGED BY PIPED LOGGERS

Fixes are available

8.5.0.2: WebSphere Application Server V8.5 Fix Pack 2
8.0.0.6: WebSphere Application Server V8.0 Fix Pack 6
7.0.0.29: WebSphere Application Server V7.0 Fix Pack 29
8.0.0.7: WebSphere Application Server V8.0 Fix Pack 7
6.1.0.47: WebSphere Application Server V6.1 Fix Pack 47
8.0.0.8: WebSphere Application Server V8.0 Fix Pack 8
7.0.0.31: WebSphere Application Server V7.0 Fix Pack 31
7.0.0.33: WebSphere Application Server V7.0 Fix Pack 33
8.0.0.9: WebSphere Application Server V8.0 Fix Pack 9
7.0.0.35: WebSphere Application Server V7.0 Fix Pack 35
8.0.0.10: WebSphere Application Server V8.0 Fix Pack 10
7.0.0.37: WebSphere Application Server V7.0 Fix Pack 37
8.0.0.11: WebSphere Application Server V8.0 Fix Pack 11
7.0.0.39: WebSphere Application Server V7.0 Fix Pack 39
8.0.0.12: WebSphere Application Server V8.0 Fix Pack 12
7.0.0.41: WebSphere Application Server V7.0 Fix Pack 41
8.0.0.13: WebSphere Application Server V8.0 Fix Pack 13
7.0.0.43: WebSphere Application Server V7.0 Fix Pack 43
8.0.0.14: WebSphere Application Server V8.0 Fix Pack 14
7.0.0.45: WebSphere Application Server V7.0 Fix Pack 45
8.0.0.15: WebSphere Application Server V8.0 Fix Pack 15
6.1.0.47: Java SDK 1.5 SR16 Cumulative Fix for WebSphere Application Server
7.0.0.29: Java SDK 1.6 SR13 FP2 Cumulative Fix for WebSphere Application Server
7.0.0.45: Java SDK 1.6 SR16 FP60 Cumulative Fix for WebSphere Application Server
7.0.0.31: Java SDK 1.6 SR15 Cumulative Fix for WebSphere Application Server
7.0.0.35: Java SDK 1.6 SR16 FP1 Cumulative Fix for WebSphere Application Server
7.0.0.37: Java SDK 1.6 SR16 FP3 Cumulative Fix for WebSphere Application Server
7.0.0.39: Java SDK 1.6 SR16 FP7 Cumulative Fix for WebSphere Application Server
7.0.0.41: Java SDK 1.6 SR16 FP20 Cumulative Fix for WebSphere Application Server
7.0.0.43: Java SDK 1.6 SR16 FP41 Cumulative Fix for WebSphere Application Server

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In IBM HTTP Server (IHS) large logformats cannot be correctly
    logged by piped loggers.
    

Local fix

  • A workaround is to reduce the number of log strings used in the
    LogFormat directive in IBM HTTP Server.
    
    The customer can use multiple SHORT LogFormats with multiple
    CustomLog directives to write output to multiple log files,
    rather than using one LONG LogFormat for everything.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  IBM HTTP Server users with access log       *
    *                  records longer than the Operating System's  *
    *                  PIPE_BUF who used piped loggers (for        *
    *                  example, rotatelogs)                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: Long access log records are garbled     *
    *                      when                                    *
    *                      using piped loggers                     *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    When IBM HTTP Server writes long access log records to a pipe,
    the log is garbled.  POSIX only guarantees atomic writes for
    the first PIPE_BUF (4k on Linux) worth of data when writing to
    a Unix pipe.
    

Problem conclusion

  • mod_log_config is changed to support a new buffer size
    parameter
    on the BufferedLogs directive, coded like this:
    
    BufferedLogs on 40000     # 3rd arg is the buffer size in bytes
    
    When the access log is piped, such as with rotatelogs, and the
    specified buffer size is greater than PIPE_BUF, IBM HTTP
    Server will obtain a cross-process lock while writing the
    buffer to the pipe. This prevents other processes from writing
    to the pipe while the lock is held, and prevents the
    corruption of the log.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM78144

  • Reported component name

    IBM HTTP SERVER

  • Reported component ID

    5724J0801

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2012-11-29

  • Closed date

    2013-01-11

  • Last modified date

    2013-01-11

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IBM HTTP SERVER

  • Fixed component ID

    5724J0801

Applicable component levels

  • R61A PSY

       UP

  • R61H PSY

       UP

  • R61I PSY

       UP

  • R61P PSY

       UP

  • R61S PSY

       UP

  • R61W PSY

       UP

  • R61Z PSY

       UP

  • R700 PSY

       UP

  • R800 PSY

       UP

  • R850 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
07 September 2022