"syslogd" process taking 100% CPU under Mac OS X 10.5.4
After updating to Mac OS X 10.5.4, users have found that the process "syslogd" is swamping the CPU, causing the computer's fans to spin excessively and resulting in poor overall system performance.
Wednesday, July 2nd
After updating to Mac OS X 10.5.4, users have found that the process "syslogd" is swamping the CPU, causing the computer's fans to spin excessively and resulting in poor overall system performance.
As described by Apple Discussions poster benevision:
"After updating to 10.5.4 update everything is very s-l-o-w. With Activity Monitor running I can see the CPU is running at 100% just about all the time. The top process in the list is #13 "syslogd" (root). Close second is bzip2 (root)."
The "syslogd" process is a utility that the OS uses to turn over system log files by using the "bzip2" utility to compress them and creating new ones when the files get to a certain size. This helps conserve space and makes it easier to search log file contents.
While this problem has been reported by some as being associated with the Mac OS X 10.5.4 update, it is known to occur in all versions of Leopard and its exact cause is uncertain. Regardless, the problem appears to reside with syslogd's interactions with the Apple System Log facility database; removing that database appears to fix the problem. Additionally, users have found that removing and recreating the system.log file also may help the problem.
Fixes
Remove the Apple System Log database Open the Terminal (located in /Applications/Utilities and run the following set of commands:
- sudo launchctl stop com.apple.syslogd
- sudo rm /var/log/asl.db
- sudo launchctl start com.apple.syslogd
These commands stop the syslogd process and then remove the database, then restart the process again. It is unadvisable to remove the database while the process is running. If the CPU still begins running at 100%, try applying the second fix.
Remove and recreate the system.log file
In the terminal run the following set of commands:
- sudo launchctl stop com.apple.syslogd
- sudo rm /var/log/system.log
- sudo touch /var/log/system.log
- sudo launchctl start com.apple.syslogd
Resources