On Tue, Oct 1, 2013 at 2:52 PM, Erik van Dam <[email protected]> wrote:
> Hi David, > > You are right, we are doing TCP/SSL. The config is: > > rsyslog-gnutls-5.8.10-2.el6.x86_64 > rsyslog-5.8.10-2.el6.x86_64 > I think we should go to a project-supported version from this point on. Makes no sense to look at old stuff where maybe just a bug bites. 7.4.4 would be ok, if you go 7.5, things are easier if we need to change something (else that is the point of when to move up). > > > $ModLoad imuxsock.so # provides support for local system logging (e.g. > via logger command) > $ModLoad imklog.so # provides kernel logging support (previously done > by rklogd) > $IMUXSockRateLimitInterval 0 > $ModLoad imudp.so > $UDPServerRun 514 > $ModLoad imtcp.so > $PreserveFQDN on > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > > $DefaultNetstreamDriver gtls > $DefaultNetstreamDriverCAFile /etc/rsyslog/protected/ca.pem > $DefaultNetstreamDriverCertFile /etc/rsyslog/protected/cert.pem > $DefaultNetstreamDriverKeyFile /etc/rsyslog/protected/key.pem > > $InputTCPServerStreamDriverPermittedPeer machine1 > $InputTCPServerStreamDriverPermittedPeer machine2 > $InputTCPServerStreamDriverPermittedPeer machine3 > $InputTCPServerStreamDriverPermittedPeer machine4 > $InputTCPServerStreamDriverPermittedPeer machine5 > $InputTCPServerStreamDriverPermittedPeer machine6 > $InputTCPServerStreamDriverPermittedPeer machine7 > $InputTCPServerStreamDriverMode 1 > $InputTCPServerRun 514 > > > $template > DailyPerHostLogs,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_messages.log" > $template > DailyrootshPerHostLogs,"/bigdisk/syslog/rootsh/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_messages.log" > local5.info > -?DailyrootshPerHostLogs > & ~ > > $template > cactilog,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_cacti-access.log" > if $syslogfacility-text == 'local0' and $msg contains '/cacti' then > -?cactilog > & ~ > > $template > nagioslog,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_nagios-access.log" > if $syslogfacility-text == 'local0' and $msg contains '/nagios' then > -?nagioslog > & ~ > > $template > somedomainname,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_somedomainname.log" > if $syslogfacility-text == 'local0' and $msg contains 'somedomainname' > then -?somedomainname > & ~ > > $template > somedomainname,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_somedomainname.log" > if $syslogfacility-text == 'local0' and $msg contains 'somedomainname' > then -?somedomainname > & ~ > > $template > somedomainname,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_somedomainname.log" > if $syslogfacility-text == 'local0' and $msg contains 'somedomainname' > then -?somedomainname > & ~ > > $template > somedomainname,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_somedomainname.log" > if $syslogfacility-text == 'local0' and $msg contains 'somedomainname' > then -?somedomainname > & ~ > > $template > nagiosandcactierror,"/bigdisk/syslog/%$YEAR%/%$MONTH%/%$DAY%/%FROMHOST-IP%_nagiosandcactierror.log" > if $syslogfacility-text == 'local1' then -?nagiosandcactierror > & ~ > > local0.* ~ > > *.* -?DailyPerHostLogs > ------------------- > > You and rainer allready opted a couple of tweaks that i can use. But i > wanted to show the stats as it's now occuring. Is the exiting of rsyslog by > design? > I just read "died"; no, of course, that's not by design, and that explains what I see in the stats. There are probably around 150+ bug fixes between the version you have and the current one. So one more indication you need to update. If we get a segfault, it makes absolutely no sense to look at old stuff. Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
