Looks like it's "queue.fulldelaymark" (and I presume "queue.lightdelaymark" may be related, but there's no description at http://www.rsyslog.com/doc/master/rainerscript/queue_parameters.html so I'm not sure yet what it does...)
Thanks! -- Dave Caplinger, Director, Technical Product Management | 402.361.3063 | Solutionary — An NTT Group Security Company > On Oct 1, 2015, at 4:03 PM, David Lang <[email protected]> wrote: > > There is a queue parameter that tells rsyslog that if the queue is larger > than X, stop accepting inputs that can be delayed (like TCP) so that there is > space left for a burst of traffic from inputs that can't be delayed (like UDP) > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

