Hi, 2009/11/4 <[email protected]>: > ok, looking at this I don't see that you have any commands that would use > the work directory.
Ok, here I have the first bug. I supposed that rsyslog will use work directory to save queues of all TCP forwards. What I missed to get this functionality? > now when you say the client computer locks up do you mean the following? > > you have a server writing logs > you have a seperate client sending logs to the server > you shut down the server > later the client machine stops responding. The client stops responding. > is this config for the client or for the server? Client. > one possible explination for the freeze you are seeing is that if you have > the client configured to send via TCP (the @@ option) and the server does > not accept the message, the client will queue the message, when the client > queue fills up it will not accept any more messages. many processes > (including login) will block until syslog accepts the message causeing the > machine to 'freeze' or 'lock up' > > does this match what you are seeing? Yes. So, activating the disk queue should fix this problem. Is it true? I would set a limit of 5GB. > if this is the case you need to decide your priorities > > how critical is it to get the logs off the machine? We have a lot of computers logging to a centralized rsyslog server. In each computer runs a application logging diferent activities (webcams, doors, etc.) We need all the data in one computer to analize it. > in other cases you are willing to loose logs rather than freezing the > machine and can configure rsyslog to accept messages, even when it can't > do anything with them to avoid this sort of lockup. How Can I do that? Thank you! > Daivd Lang > > > On Wed, 4 Nov 2009, Miguel Angel Nieto wrote: > >> $ModLoad immark.so # provides --MARK-- message capability >> $ModLoad imuxsock.so # provides support for local system logging (e.g. >> via logger command) >> $ModLoad imklog.so # kernel logging (formerly provided by rklogd) >> >> $WorkDirectory /var/log/queue >> $MainMsgQueueFileName mainq >> >> $ActionQueueType LinkedList >> $ActionQueueFileName dbq >> $ActionQueueMaxDiskSpace 1g >> $ActionQueueSaveOnShutdown on >> $ActionResumeRetryCount -1 >> :msg, contains, "TVC" @@10.10.0.100 >> & ~ >> $ActionQueueType LinkedList >> $ActionQueueFileName dbq >> $ActionQueueMaxDiskSpace 1g >> $ActionQueueSaveOnShutdown on >> $ActionResumeRetryCount -1 >> :msg, contains, "TVB" @@10.10.0.100 >> & ~ >> $ActionQueueType LinkedList >> $ActionQueueFileName dbq >> $ActionQueueMaxDiskSpace 1g >> $ActionQueueSaveOnShutdown on >> $ActionResumeRetryCount -1 >> :msg, contains, "TTD" @@10.10.0.100 >> & ~ >> $ActionQueueType LinkedList >> $ActionQueueFileName dbq >> $ActionQueueMaxDiskSpace 1g >> $ActionQueueSaveOnShutdown on >> $ActionResumeRetryCount -1 >> :msg, contains, "KCD" @@10.10.0.100 >> & ~ >> $ActionQueueType LinkedList >> $ActionQueueFileName dbq >> $ActionQueueMaxDiskSpace 1g >> $ActionQueueSaveOnShutdown on >> $ActionResumeRetryCount -1 >> :msg, contains, "LPT" @@10.10.0.100 >> & ~ >> $ActionQueueType LinkedList >> $ActionQueueFileName dbq >> $ActionQueueMaxDiskSpace 1g >> $ActionQueueSaveOnShutdown on >> $ActionResumeRetryCount -1 >> :msg, contains, "ABT" @@10.10.0.100 >> & ~ >> $ActionQueueType LinkedList >> $ActionQueueFileName dbq >> $ActionQueueMaxDiskSpace 1g >> $ActionQueueSaveOnShutdown on >> $ActionResumeRetryCount -1 >> :msg, contains, "XET" @@10.10.0.100 >> & ~ >> >> *.* /var/log/syslog >> kern.* /dev/console >> *.info;mail.none;authpriv.none;cron.none -/var/log/messages >> authpriv.* /var/log/secure >> mail.* -/var/log/maillog >> cron.* -/var/log/cron >> uucp,news.crit -/var/log/spooler >> local7.* /var/log/boot.log >> >> >> 2009/11/4 <[email protected]>: >>> On Wed, 4 Nov 2009, Miguel Angel Nieto wrote: >>> >>>> I have a problem with the attached client-configuration. When I stop >>>> the server, the client computer hangs-up some minutes later and didn't >>>> write logs on $WorkDirectory /var/log/queue. >>> >>> this list strips attachments, please re-send with the config in the body of >>> the message. >>> >>> david Lang >>> _______________________________________________ >>> rsyslog mailing list >>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>> http://www.rsyslog.com >>> >>> _______________________________________________ >>> rsyslog mailing list >>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>> http://www.rsyslog.com >>> >>> >> >> >> >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > -- Lo que haría sería hacerme pasar por sordomudo y así no tendría que hablar. Si querían decirme algo, tendrían que escribirlo en un papelito y enseñármelo. Al final se hartarían y ya no tendría que hablar el resto de mi vida. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
