not yet, busy with other things... 2014-11-03 10:05 GMT+01:00 Anwar El fatayri <[email protected]>:
> Any ideas ? > > El Fatayri Anwar > > > > > > From: [email protected] > > To: [email protected] > > Date: Fri, 31 Oct 2014 15:52:51 +0100 > > Subject: Re: [rsyslog] Rsyslog 5.8.10 & 7.4.10 : RELP + Failover Servers > Issue > > > > So is this a bug ? The messages generated while rsyslog is switching to > the secondary server are lost ? > > > > El Fatayri Anwar > > > > > > > > > > > From: [email protected] > > > To: [email protected] > > > Date: Fri, 31 Oct 2014 14:34:51 +0100 > > > Subject: Re: [rsyslog] Rsyslog 5.8.10 & 7.4.10 : RELP + Failover > Servers Issue > > > > > > same problem with 8.4.2 > > > > > > El Fatayri Anwar > > > > > > > > > > > > > > > > Date: Fri, 31 Oct 2014 13:01:12 +0100 > > > > From: [email protected] > > > > To: [email protected] > > > > Subject: Re: [rsyslog] Rsyslog 5.8.10 & 7.4.10 : RELP + Failover > Servers Issue > > > > > > > > Can you reproduce this with the currently supported 8.4.2 version? > > > > > > > > 2014-10-31 11:33 GMT+01:00 Anwar El fatayri < > [email protected]>: > > > > > > > > > Hey David, > > > > > I've already tried to set it ($ActionResumeRetryCount) to default > (0) and > > > > > 1 with both versions (5.8.10 & 7.4.10) but the problem wasn't > solved ---> > > > > > it doesn't switch ... > > > > > > > > > > El Fatayri Anwar > > > > > > > > > > > > > > > > > > > > > > > > > > Date: Fri, 31 Oct 2014 03:08:37 -0700 > > > > > > From: [email protected] > > > > > > To: [email protected] > > > > > > Subject: Re: [rsyslog] Rsyslog 5.8.10 & 7.4.10 : RELP + Failover > Servers > > > > > Issue > > > > > > > > > > > > On Fri, 31 Oct 2014, Anwar El fatayri wrote: > > > > > > > > > > > > > Hey all, > > > > > > > I wish to have the following centralized logging system : > > > > > > > > > > > > > > 1) all rsyslog clients should send their logs to a primary > server over > > > > > RELP > > > > > > > 2) If the primary server goes down, rsyslog clients should > switch to a > > > > > secondary rsyslog-RELP server > > > > > > > Config File : > > > > > > > $ModLoad omrelp > > > > > > > > > > > > > > ### First Part ###$WorkDirectory /var/log/spool # where to > place spool > > > > > files$ActionQueueFileName fwdrelp # unique name prefix for spool > > > > > files$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much > as > > > > > possible)$ActionQueueSaveOnShutdown on # save messages to disk on > > > > > shutdown$ActionQueueType LinkedList # run > > > > > asynchronously$ActionResumeRetryCount -1 # infinite retries if > host is > > > > > down > > > > > > > ### Second Part ###*.* > > > > > :omrelp:logserver01:6514$ActionExecOnlyWhenPreviousIsSuspended on& > > > > > :omrelp:logserver02:6514& > > > > > /var/log/localbuffer.log$ActionExecOnlyWhenPreviousIsSuspended off > > > > > > > > > > > > > > > > > > > > > However, when the primary server goes down, spool files are > being > > > > > generated and syslog flux is never redirected to the secondary > server ==> > > > > > The rsyslog client is waiting for the primary server to goes up > again in > > > > > order to resend spool files. > > > > > > > Trying to delete the first part of the config file and use > only the > > > > > second one solved a part of the problem ==> Failover works and > rsyslog > > > > > automatically switches between its two destination. However > Disk-based > > > > > buffering is not configured anymore and some messages are lost > during the > > > > > switching process. > > > > > > > I've tested on both 5.8.10 and 7.4.10. > > > > > > > Any ideas ? > > > > > > > > > > > > when you tell it to make infinite tries to deliver the messages > to a > > > > > server, it > > > > > > never fails, so it's not going to fail over to the secondary > server. You > > > > > need to > > > > > > set a limit to the retries. > > > > > > > > > > > > David Lang > > > > > > _______________________________________________ > > > > > > rsyslog mailing list > > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > > http://www.rsyslog.com/professional-services/ > > > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by > a myriad > > > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > > > > > DON'T LIKE THAT. > > > > > > > > > > _______________________________________________ > > > > > rsyslog mailing list > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > http://www.rsyslog.com/professional-services/ > > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > > > > > DON'T LIKE THAT. > > > > > > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you DON'T LIKE THAT. > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you DON'T LIKE THAT. > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

