On Fri, Jan 22, 2016 at 6:22 AM, Chaloulos, Klearchos (Nokia - GR/Athens) <
[email protected]> wrote:

> Hello,
>
> I am using a logging setup in a cluster of virtual machines(nodes), where
> the flow of logs is like this:
>
> Systemd-journald - > rsyslog local on all nodes of cluster -> rsyslog
> master on master node.
>
> I see the following error: "Uncompression of a message failed with return
> code -3".


This comes from the rsyslog message parser where it seeks to decompress a
message it sees beginning with the letter "z".  If it fails to successfully
decompress the message, it emits this error and ignores the message.


> What puzzles me is that I have not specified any compression in the
> rsyslog configuration. Is it possible for this error to appear when no
> compression is explicitly specified?
>

Which instance of the rsyslog process is emitting the message, the one
local on all cluster nodes or the rsyslog instance on the master node?

If it is the latter, what is the template being used to send log data to
the master?

-peter


>
> There is no compression enabled in systemd-journald either.
>
> Best regards,
>
> Klearchos
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to