Hello,
I am using rsyslog to transfer logs to a primary server. If this server is
unreachable, the transfer is done on a secondary server.
This can be done with 'Failover Syslog Server' mechanism like this
ruleset(name="forwarding" queue.type="linkedList" queue.filename="fwdq") {
action(type="omfwd" target="primary-syslog.example.com" port="10514"
protocol="tcp")
action(type="omfwd" target="secondary-1-syslog.example.com"
port="10514"
action.execOnlyWhenPreviousIsSuspended="on")
action(type="omfwd" target="secondary-2-syslog.example.com"
port="10514"
action.execOnlyWhenPreviousIsSuspended="on")
action(type="omfile" tag="failover" file="/var/log/localbuffer"
action.execOnlyWhenPreviousIsSuspended="on")
}
But I also would like to be warned when the transfer is nominal, that is to
say logs go to primary server, or degraded, that is to say logs go to
secondary server. I had the idea to use omprog output module, between the 2
omfwd, to call a process to warn me, but I guess the treatment will stop
when the command is ok, and the failover will not be handled. Moreover, the
command will be called for each received log in degraded mode.
What is the best approach according to you? Output Modules? Logs analyze?
Connections polling?
Thank you for your help.
David
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
I am using rsyslog to transfer logs to a primary server. If this server is
unreachable, the transfer is done on a secondary server.
This can be done with 'Failover Syslog Server' mechanism like this
ruleset(name="forwarding" queue.type="linkedList" queue.filename="fwdq") {
action(type="omfwd" target="primary-syslog.example.com" port="10514"
protocol="tcp")
action(type="omfwd" target="secondary-1-syslog.example.com"
port="10514"
action.execOnlyWhenPreviousIsSuspended="on")
action(type="omfwd" target="secondary-2-syslog.example.com"
port="10514"
action.execOnlyWhenPreviousIsSuspended="on")
action(type="omfile" tag="failover" file="/var/log/localbuffer"
action.execOnlyWhenPreviousIsSuspended="on")
}
But I also would like to be warned when the transfer is nominal, that is to
say logs go to primary server, or degraded, that is to say logs go to
secondary server. I had the idea to use omprog output module, between the 2
omfwd, to call a process to warn me, but I guess the treatment will stop
when the command is ok, and the failover will not be handled. Moreover, the
command will be called for each received log in degraded mode.
What is the best approach according to you? Output Modules? Logs analyze?
Connections polling?
Thank you for your help.
David
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.