Dear David,
I am using the following parameters 1000/sec. I could not understand
"dequeue delay" . Which one should be used.
*queue.fulldelaymark*
*queue.lightdelaymark* number
action(type="omfwd" target="127.0.0.1" port="5170" protocol="tcp"
template="msgonly" queue.filename="forwarding"
queue.size="1000000" queue.dequeuebatchsize="1000"
queue.type="LinkedList"
)
Thanks
On Thu, Dec 17, 2015 at 1:29 PM, David Lang <[email protected]> wrote:
> On Wed, 16 Dec 2015, masoom alam wrote:
>
> Hi Every one,
>>
>> What is the decent way of capping the log entries per second that Rsyslog
>> can receive, store them in the queue ...and after a certain limit is
>> crossed it will start discarding the received log entries. Is this
>> possible
>> through queues only?
>>
>> I am asking as Rsyslog is very fast and can flood other components very
>> easily...
>>
>
>
> There is no way to limit the input rate of rsyslog. you can limit the
> output rate (set the batch size to one, and then set dequeue delay to limit
> how fast logs can be sent)
>
> if you are using a reliable delivery mechanism, then when the queues fill
> up, the things delivering logs to rsyslog will wait.
>
> David Lang
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
