On Fri, 23 Oct 2009, Rainer Gerhards wrote: > In short: this can not currently be done and it would require considerable > modification to the engine to do so. Part of the work I plan in moving queues > to rule sets may actually help, but it is some way to there. Icluding that I > first want to get a stable v5 and there are lots of smaller, but important > things in front of it (like the DNS resolution issue.
that's what I suspected, I just wanted to make sure. with the new queue engine can you have multiple worker threads? (I seem to remember that initially you couldn't with batch mode, and in almost every case there is no reason to as a single thread in batch mode can do so much more than it could before) David Lang > Rainer > >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of [email protected] >> Sent: Friday, October 23, 2009 10:23 PM >> To: rsyslog-users >> Subject: [rsyslog] queue configuration >> >> I know that you can create an action queue for a specific output. >> >> is there any way to create an action queue for multiple outputs? >> >> for example, in my configuration I have >> >> :fromhost, !isequal, "127.0.0.1" >> /var/log/messages;TraditionalFormat >> :fromhost, isequal, "127.0.0.1" >> @192.168.1.1;TraditionalForwardFormat >> *.* @192.168.1.115 >> *.* @192.168.1.241 >> *.* @192.168.1.242 >> *.* @192.168.1.6 >> *.* @192.168.1.7 >> *.* @192.168.1.122 >> :hostname, contains ,"MSWinEventLog" /var/log/messages;fixsnareFormat2 >> & @192.168.1.1;fixsnareForwardFormat2 >> & ~ >> :syslogtag, startswith, "MSWinEventLog#011" >> /var/log/messages;fixsnareFormat >> & @192.168.1.1;fixsnareForwardFormat >> & ~ >> *.* /var/log/messages;TraditionalFormat >> *.* @192.168.1.1 >> >> it would be nice to move the outbound relays off to a >> different queue, and >> to put the list of rules that have order dependancies >> (because they output >> in different formats to fix up formatting problem) to a >> seperate queue to >> spread the work across multiple processes and not slow down the basic >> writing to file. >> >> but as far as I can tell I would have to create a queue for each >> individual item, and I can't create a queue for the part of >> the config >> where I need to discard. >> >> am I missing something (including a better way to do everything ;-) >> >> David Lang >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
