I learned that action() doesn't need to be explicitly called out in a config for something to be an 'action'. My main rsyslog.conf file only had two action() sections so much of my confusion was not seeing things line up there. There were two other default .conf files in /etc/rsyslog.d/ which had a number of legacy configurations in them which were the culprits.
Tks! Doug On Fri, Jun 20, 2014 at 5:31 PM, David Lang <[email protected]> wrote: > adding the name is the easiest way, other than that, these are in the > order they appear in in the config file, so in this case it should be the > last action listed in your file. > > David Lang > > > On Fri, 20 Jun 2014, Doug McClure wrote: > > rsyslog v7.4.4 >> >> What might be done to identify an action that's failing? >> >> I've got names on the obvious ones that I could find accept them (imptcp >> not working?). Is there a way to associate these action 1-11 to something >> in my config? It may be nothing - just curious as to what the failure >> might be. >> >> Fri Jun 20 15:06:22 2014: imuxsock: submitted=2 ratelimit.discarded=0 >> ratelimit.numratelimiters=2 >> Fri Jun 20 15:06:22 2014: action 1: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 2: processed=86 failed=0 >> Fri Jun 20 15:06:22 2014: action 3: processed=2035 failed=0 >> Fri Jun 20 15:06:22 2014: action 4: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 5: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 6: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 7: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 8: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 9: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 10: processed=0 failed=0 >> Fri Jun 20 15:06:22 2014: action 11: processed=2120 failed=2120 >> Fri Jun 20 15:06:22 2014: dynafile cache MyLocalFileOutput: requests=2121 >> level0=1722 missed=42 evicted=32 maxused=10 >> Fri Jun 20 15:06:22 2014: MyLocalFileOutput: processed=2121 failed=0 >> Fri Jun 20 15:06:22 2014: Myforwarder: processed=2121 failed=0 >> Fri Jun 20 15:06:22 2014: imptcp(*/10514/IPv4): submitted=2115 >> Fri Jun 20 15:06:22 2014: imptcp(*/10514/IPv6): submitted=0 >> Fri Jun 20 15:06:22 2014: Myforwarder[DA]: size=0 enqueued=0 full=0 >> discarded.full=0 discarded.nf=0 maxqsize=0 >> Fri Jun 20 15:06:22 2014: Myforwarder: size=0 enqueued=2121 full=0 >> discarded.full=0 discarded.nf=0 maxqsize=38 >> Fri Jun 20 15:06:22 2014: main Q: size=0 enqueued=2121 full=0 >> discarded.full=0 discarded.nf=0 maxqsize=47 >> >> >> Doug >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> >> _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
