Hi all, I am trying to configure a rsyslog instance to monitor some plain text files and then forwards to a central rsyslog server. My actual configuration is:
# rsyslog v5 configuration file # For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html # If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html # Increasing Message size $MaxMessageSize 64k #### MODULES #### #$ModLoad imuxsock # provides support for local system logging (e.g. via logger command) #$ModLoad imklog # provides kernel logging support (previously done by rklogd) #$ModLoad immark # provides --MARK-- message capability $ModLoad imfile # provides access to files # Provides UDP syslog reception #$ModLoad imudp #$UDPServerRun 514 # Provides TCP syslog reception #$ModLoad imtcp #$InputTCPServerRun 514 #### GLOBAL DIRECTIVES #### # Use default timestamp format $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat # File syncing capability is disabled by default. This feature is usually not required, # not useful and an extreme performance hit #$ActionFileEnableSync on # Define queues $WorkDirectory /data/rsyslog $InputFileName /data/test/logs/current/test1.log $InputFileTag fwd_test: $InputFileStateFile stat-fwd_test $InputFileSeverity info $InputRunFileMonitor $InputFilePollingInterval 1 $ActionQueueFileName fwdtest $IncludeConfig /data/config/etc/rsyslog/queues-options.conf if ($programname == 'test' and not ($msg startswith '#')) then @@192.168.3.2:15514 & ~ queues-options.conf: $ActionQueueMaxDiskSpace 3g $ActionQueueSaveOnShutdown on $ActionQueueType LinkedList $ActionResumeRetryCount -1 but it doesn't works no messages are queued (i have stopped rsyslog central server). Somebody knows what am I doing wrong?? I have do it serveral searches about this type of config, and nothing is different compared with mine, except plain text files ... rsyslog is 5.8.10 ... _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
