On Tue, Jan 19, 2016 at 11:03 PM, Erich Titl <erich.t...@think.ch> wrote:

>
> > rsyslog has RELP to reliable transfer syslog messages to a remote server,
> > but Bering-uClibc uses syslog-ng. If I understood it correctly syslog-ng
> > has RLTP as a reliable protocol, but only in the commercial version.
>
> Why do you think so? What I understand from the docs:
>
> destination remote_server { udp("10.0.0.2" port(514)); };
>
> This, I believe, is supported by all versions of syslog-ng.
>

That's the normal UDP syslog protocol, which is unreliable. The client
sends the message but doesn't care if the message is received and written
to disk on the remote server. That means you're going to lose all log
messages whenever the remote server reboots or is shut down for maintenance
or when the syslog daemon is shut down for an upgrade or even when the
switch in between reboots because of an upgrade.

That's why rsyslog implemented the RELP protocol, which doesn't lose
massages in these situations:

<http://blog.gerhards.net/2008/04/on-unreliability-of-plain-tcp-syslog.html>
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to