This may also be of interest: http://kb.monitorware.com/problem-to-migrate-from-syslog-ng-to-rsyslog-t8982. html
Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Rainer Gerhards > Sent: Thursday, July 29, 2010 12:43 PM > To: rsyslog-users > Subject: Re: [rsyslog] Buggy pipe behaviour > > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Steffen Sledz > > Sent: Thursday, July 29, 2010 12:33 PM > > To: rsyslog-users > > Subject: Re: [rsyslog] Buggy pipe behaviour > > > > Am 29.07.2010 10:46, schrieb Rainer Gerhards: > > > This sounds like intended behavior. When an action fails (pipe > fails > > when > > > nobody reads and it is tried to write to it), rsyslog retries the > > configured > > > number of times and then suspends the action for the configured > > period (at > > > least I think it is configurable, you need to look up the details). > > Only > > > after this period the action is retried. If it fails again, it is > > > re-suspended, but this time with a longer suspension period. This > is > > done so > > > that rsyslog does not spent a lot of time on actions known to be > > failing. > > > > So you say, if i wait long enough the messages should receive the end > > of the pipe? > > Yes, that's what I assume. > > > > > Are there some related debug printouts i can search for? > > Search for "suspend", that should bring up a couple of messages. > > > > > Can you give some hints to the related configuration parameters (URL > or > > keyword). Unfortunately the manual is not very helpful here. > > See > http://www.rsyslog.com/doc/rsyslog_conf_global.html > > quick check brings up that > $ActionResumeRetryCount > $ACtionREsumeInterval > > Is relevant > > > > > > From what you wrote, I think your use case would probably better be > > served by > > > omprog, but I may be wrong. If you think about this route, you need > > to know > > > that someone requested the functionality, but was never seen when > it > > was done > > > ;) So the module is only barely tested. > > > > Same wish. Where can i read more about omprog? > > I thought I had writen some doc before I learned that this work was not > being > used by the original requester. I just checked, but it does not seem > so. So > it is probably best to look at the source. > > Rainer > > > > Regards, > > Steffen > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
