I re-written my config file (client). With this config my client logs runs but when I shut down remote log server, on my client I don't see any queue on disk /var/spool/rsyslog
what's the error? thanks! Pol $ModLoad imuxsock # provides support for local system logging $ModLoad imklog # provides kernel logging support (previously done by rklogd) $ModLoad immark # provides --MARK-- message capability # provides UDP syslog reception $ModLoad imudp $UDPServerRun 514 # certificate files - just CA for a client $DefaultNetstreamDriverCAFile /etc/ssl/rsyslog/ca.pem # set up the action $DefaultNetstreamDriver gtls # use gtls netstream driver $ModLoad immark # provides --MARK-- message capability # provides UDP syslog reception $ModLoad imudp $UDPServerRun 514 # certificate files - just CA for a client $DefaultNetstreamDriverCAFile /etc/ssl/rsyslog/ca.pem # set up the action $DefaultNetstreamDriver gtls # use gtls netstream driver $ActionSendStreamDriverMode 1 # require TLS for the connection $ActionSendStreamDriverAuthMode anon # server is NOT authenticated $WorkDirectory /var/spool/rsyslog # destination queue directory $ActionQueueType LinkedList # de-couple this action queue $ActionQueueFileName filename # set a file for this action; enables disk mode $ActionResumeRetryCount -1 # infinite retries on failure $ActionQueueSaveOnShutdown off # save in-memory data if rsyslog shuts down *.* @@(o)ip:port _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
