On Wed, 22 Jul 2015, Gerhardus Geldenhuis wrote:
Looks like I cracked my problem. I now reliably get logs send to my server regardless of how I break the connection between server and client, and regardless of the number of messages.My config on the client: action( type="omrelp" name="logtoserver" target="192.168.8.134" port="514" queue.size="5000" queue.type="LinkedList" queue.spoolDirectory="/var/lib/rsyslog" queue.filename="testforwardingqueue" queue.lowwatermark="2000" queue.highwatermark="3500" queue.discardmark="5000" queue.maxfilesize="1g" queue.saveonshutdown="on" action.ResumeInterval="10" action.ResumeRetryCount="-1" action.reportSuspension="on" action.reportSuspensionContinuation="on" ) What did the trick in the end was looking at the queue settings by running rsyslog in debug mode and noticing that the action settings were "unset". I expected them to be set to default values but this has turned out not to be the case so a bit of a gotcha.
which values were unset? David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

