Hello everyone,
I have implemented configuration files linked list queues and everythings
works fine in my lab environment. However, when I put this configuration to
production I saw a behaviour that I do not know is related to my
configuration or not.
The TCP connections with the logsources keep restarting all the time and
only works at the beginning of a rsyslog restart.
This is my configuration:
if ($fromhost-ip == '1.2.3.4') then
{ action(type="omfwd"
queue.type="LinkedList"
queue.size="10000"
queue.filename="myqueue_queue"
queue.maxdiskspace="100000000"
action.resumeRetryCount="-1"
queue.saveonshutdown="on"
Target="10.10.1.10"
Port="514"
Protocol="tcp"
template="raw")
}
And the log source is ingesting around 4k EPS to the rsyslog server.
Could you please give me advice or knowledge about how to deal with it?
Kind regards,
Fran
--
Sent from: http://rsyslog-users.1305293.n2.nabble.com/
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
I have implemented configuration files linked list queues and everythings
works fine in my lab environment. However, when I put this configuration to
production I saw a behaviour that I do not know is related to my
configuration or not.
The TCP connections with the logsources keep restarting all the time and
only works at the beginning of a rsyslog restart.
This is my configuration:
if ($fromhost-ip == '1.2.3.4') then
{ action(type="omfwd"
queue.type="LinkedList"
queue.size="10000"
queue.filename="myqueue_queue"
queue.maxdiskspace="100000000"
action.resumeRetryCount="-1"
queue.saveonshutdown="on"
Target="10.10.1.10"
Port="514"
Protocol="tcp"
template="raw")
}
And the log source is ingesting around 4k EPS to the rsyslog server.
Could you please give me advice or knowledge about how to deal with it?
Kind regards,
Fran
--
Sent from: http://rsyslog-users.1305293.n2.nabble.com/
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.