Hi,
It looks like, contrary to what [1] says, it's actually impossible (at least
in 7.4.6) to limit the amount of disk space used by a disk assisted queue.
The queue.maxdiskspace parameter is equivalent to queue.maxfilesize, i.e.,
it sets the maximum size of a single queue file, not the entire queue (set
of files).
In my test setup the queue is configured as follows:
action(
type = "omfwd"
Target = "rsyslog-test-2"
Port = "514"
Protocol = "tcp"
action.resumeRetryCount = "-1"
queue.type = "LinkedList"
queue.filename = "rsyslog-test-2"
queue.size = "200"
queue.highwatermark = "150"
queue.lowwatermark = "50"
queue.maxdiskspace = "256k"
queue.timeoutenqueue = "0"
)
After submitting 7500 syslog messages (with remote syslog server offline)
the spool directory has the following contents:
# ls -Al /var/spool/rsyslog/
total 3132
-rw------- 1 root root 262474 Dec 3 11:42 rsyslog-test-2.00000001
-rw------- 1 root root 262502 Dec 3 11:42 rsyslog-test-2.00000002
-rw------- 1 root root 262343 Dec 3 11:42 rsyslog-test-2.00000003
-rw------- 1 root root 262172 Dec 3 11:42 rsyslog-test-2.00000004
-rw------- 1 root root 262179 Dec 3 11:42 rsyslog-test-2.00000005
-rw------- 1 root root 262560 Dec 3 11:42 rsyslog-test-2.00000006
-rw------- 1 root root 262421 Dec 3 11:42 rsyslog-test-2.00000007
-rw------- 1 root root 262286 Dec 3 11:42 rsyslog-test-2.00000008
-rw------- 1 root root 262248 Dec 3 11:43 rsyslog-test-2.00000009
-rw------- 1 root root 262215 Dec 3 11:43 rsyslog-test-2.00000010
-rw------- 1 root root 262154 Dec 3 11:43 rsyslog-test-2.00000011
-rw------- 1 root root 262504 Dec 3 11:43 rsyslog-test-2.00000012
-rw------- 1 root root 9464 Dec 3 11:43 rsyslog-test-2.00000013
Clearly the 256k limit applies to the size of a single file.
[1] http://www.rsyslog.com/doc/queues.html
--
Karol Jurak
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.