David, all, I have thought a bit more about this. Actually, I think almost everything is already present by now, just some glue is missing. The most important thing, ruleset-specific "main" queues was due to implement soon (I worked towards that the past two month). So, in short, I'll have a look at it this week while running the stability lab tests (they always take considerable time).
I don't want to promise anything, but it may be possible that this feature could become available shortly. That would also build that basis for some considerabe performance improvement (for some environments), so it seems to be very relevant to my short-term goals. Thanks for bringing this up and making me think about it ;) Rainer > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of [email protected] > Sent: Friday, October 23, 2009 10:34 PM > To: rsyslog-users > Subject: Re: [rsyslog] queue configuration > > On Fri, 23 Oct 2009, Rainer Gerhards wrote: > > > In short: this can not currently be done and it would > require considerable > > modification to the engine to do so. Part of the work I > plan in moving queues > > to rule sets may actually help, but it is some way to > there. Icluding that I > > first want to get a stable v5 and there are lots of > smaller, but important > > things in front of it (like the DNS resolution issue. > > that's what I suspected, I just wanted to make sure. > > with the new queue engine can you have multiple worker > threads? (I seem to > remember that initially you couldn't with batch mode, and in > almost every > case there is no reason to as a single thread in batch mode > can do so much > more than it could before) > > David Lang > > > Rainer > > > >> -----Original Message----- > >> From: [email protected] > >> [mailto:[email protected]] On Behalf Of > [email protected] > >> Sent: Friday, October 23, 2009 10:23 PM > >> To: rsyslog-users > >> Subject: [rsyslog] queue configuration > >> > >> I know that you can create an action queue for a specific output. > >> > >> is there any way to create an action queue for multiple outputs? > >> > >> for example, in my configuration I have > >> > >> :fromhost, !isequal, "127.0.0.1" > >> /var/log/messages;TraditionalFormat > >> :fromhost, isequal, "127.0.0.1" > >> @192.168.1.1;TraditionalForwardFormat > >> *.* @192.168.1.115 > >> *.* @192.168.1.241 > >> *.* @192.168.1.242 > >> *.* @192.168.1.6 > >> *.* @192.168.1.7 > >> *.* @192.168.1.122 > >> :hostname, contains ,"MSWinEventLog" > /var/log/messages;fixsnareFormat2 > >> & @192.168.1.1;fixsnareForwardFormat2 > >> & ~ > >> :syslogtag, startswith, "MSWinEventLog#011" > >> /var/log/messages;fixsnareFormat > >> & @192.168.1.1;fixsnareForwardFormat > >> & ~ > >> *.* /var/log/messages;TraditionalFormat > >> *.* @192.168.1.1 > >> > >> it would be nice to move the outbound relays off to a > >> different queue, and > >> to put the list of rules that have order dependancies > >> (because they output > >> in different formats to fix up formatting problem) to a > >> seperate queue to > >> spread the work across multiple processes and not slow > down the basic > >> writing to file. > >> > >> but as far as I can tell I would have to create a queue for each > >> individual item, and I can't create a queue for the part of > >> the config > >> where I need to discard. > >> > >> am I missing something (including a better way to do everything ;-) > >> > >> David Lang > >> _______________________________________________ > >> rsyslog mailing list > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> http://www.rsyslog.com > >> > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
