Hi
We are using rsyslog-8.2102 and we are trying to delay forwarding of
syslogs messages to a remote host.
ruleset ( name="ForwardToServer1" queue.size="1000"
queue.dequeuebatchsize="1" queue.type="LinkedList"
queue.dequeueslowdown="100000" ) {
if $syslogfacility-text != 'authpriv' and $syslogfacility-text ==
'local4' then
action( type="omfwd" Target="172.24.68.195" Port="514"
Protocol="udp" template="OUTGOING_MESSAGE_FORMAT2" )
}
call ForwardToServer1
Is there anything wrong with the above ruleset which is trying to add
a delay of 100ms to dequeue a message? I am stracing rsyslogd and I
see the message going at the next millisecond it was logged by a
program. I'm generating one syslog every few seconds and it goes out
in the same millisecond it was received by rsyslogd.
Thank you
Prasad
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
We are using rsyslog-8.2102 and we are trying to delay forwarding of
syslogs messages to a remote host.
ruleset ( name="ForwardToServer1" queue.size="1000"
queue.dequeuebatchsize="1" queue.type="LinkedList"
queue.dequeueslowdown="100000" ) {
if $syslogfacility-text != 'authpriv' and $syslogfacility-text ==
'local4' then
action( type="omfwd" Target="172.24.68.195" Port="514"
Protocol="udp" template="OUTGOING_MESSAGE_FORMAT2" )
}
call ForwardToServer1
Is there anything wrong with the above ruleset which is trying to add
a delay of 100ms to dequeue a message? I am stracing rsyslogd and I
see the message going at the next millisecond it was logged by a
program. I'm generating one syslog every few seconds and it goes out
in the same millisecond it was received by rsyslogd.
Thank you
Prasad
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.