I?m getting the following error trying to test using Disk-Assisted in memory queues. So the error is:
root@splunk:/var/spool/rsyslog# rsyslogd -N1
rsyslogd: version 8.2112.0, config validation run (level 1), master config /etc/rsyslog.conf
rsyslogd: error during parsing file /etc/rsyslog.d/10-remote-syslog.conf, on or before line 76: syntax error on token '" queue.fileName=?vcenter.log? queue.workerThreads=' [v8.2112.0 try https://www.rsyslog.com/e/2207 ]
rsyslogd: could not interpret master config file '/etc/rsyslog.conf'. [v8.2112.0 try https://www.rsyslog.com/e/2207 ]
Relevant *.conf lines 72 ? 79 below:
ruleset(name="esxi20524" queue.type="linkedlist" queue.workerThreads="4" queue.workerThreadMinimumMessages="20000"){
action(type="omfile" file="/var/log/remote-syslog/esxi.log" ioBufferSize="64k" flushOnTXEnd="off" asyncWriting="on")
}
ruleset(name="vcenter20525? queue.type="linkedlist" queue.fileName=?vcenter.queue? queue.workerThreads="4" queue.workerThreadMinimumMessages="20000"){
action(type="omfile" FileCreateMode=?0644? fileOwner=?syslog? fileGroup=?adm? file="/var/log/remote-syslog/vcenter.log" ioBufferSize="64k" flushOnTXEnd="off" asyncWriting="on")
}
I am testing both DA, as well as the FileCrearteMode/Owner/Group properties as well. Anyway for queue.fileName I have tried ?file?, ?file.ext? neither work. Unless I?m employing DA wrong from the beginning.
I just read on an archived mailing list thread, about how it?s pretty silly to use disk.queues with omfile, maybe that?s my problem all along?
[Jamf]
Ben Hart
IT Systems Administrator II
100 Washington Ave S, Minneapolis, MN 55401
[Phone]
+00 1 989 424 0187
[Email]
ben.hart@jamf.com
[Web]
www.jamf.com<https://www.jamf.com>
[Facebook] [Twitter] [LinkedIn] [YouTube]
root@splunk:/var/spool/rsyslog# rsyslogd -N1
rsyslogd: version 8.2112.0, config validation run (level 1), master config /etc/rsyslog.conf
rsyslogd: error during parsing file /etc/rsyslog.d/10-remote-syslog.conf, on or before line 76: syntax error on token '" queue.fileName=?vcenter.log? queue.workerThreads=' [v8.2112.0 try https://www.rsyslog.com/e/2207 ]
rsyslogd: could not interpret master config file '/etc/rsyslog.conf'. [v8.2112.0 try https://www.rsyslog.com/e/2207 ]
Relevant *.conf lines 72 ? 79 below:
ruleset(name="esxi20524" queue.type="linkedlist" queue.workerThreads="4" queue.workerThreadMinimumMessages="20000"){
action(type="omfile" file="/var/log/remote-syslog/esxi.log" ioBufferSize="64k" flushOnTXEnd="off" asyncWriting="on")
}
ruleset(name="vcenter20525? queue.type="linkedlist" queue.fileName=?vcenter.queue? queue.workerThreads="4" queue.workerThreadMinimumMessages="20000"){
action(type="omfile" FileCreateMode=?0644? fileOwner=?syslog? fileGroup=?adm? file="/var/log/remote-syslog/vcenter.log" ioBufferSize="64k" flushOnTXEnd="off" asyncWriting="on")
}
I am testing both DA, as well as the FileCrearteMode/Owner/Group properties as well. Anyway for queue.fileName I have tried ?file?, ?file.ext? neither work. Unless I?m employing DA wrong from the beginning.
I just read on an archived mailing list thread, about how it?s pretty silly to use disk.queues with omfile, maybe that?s my problem all along?
[Jamf]
Ben Hart
IT Systems Administrator II
100 Washington Ave S, Minneapolis, MN 55401
[Phone]
+00 1 989 424 0187
[Email]
ben.hart@jamf.com
[Web]
www.jamf.com<https://www.jamf.com>
[Facebook] [Twitter] [LinkedIn] [YouTube]