I have added a sentence to the blog posting spelling out that everything is transferred. You can also easily verify with impstats (if it is available for ancient v5, I really don't know any longer ;)).
Rainer 2016-02-17 15:53 GMT+01:00 Rainer Gerhards <[email protected]>: > yes, of course they are transferred. I'll check if that really is not > spelled out. > > Rainer > > 2016-02-17 15:40 GMT+01:00 nicolas <[email protected]>: > >> thanks for the reply, but, >> that page doesn't explain if the log queues contained in that file are >> transfered on rsyslog-server. >> that page just explain why you want to keep one spool file open. >> ok fine, why not.. i'm concerned only about the logs. >> if you tell me that even if the spool file size is greater than zero and >> do contain log lines *but* they are all transfered in due time, provided >> rsyslog-server is up, i'll be happy. >> i was under the impression this wasn't the case though? >> >> >> >> >> >> On 02/17/2016 03:25 PM, Rainer Gerhards wrote: >> >>> I think this also applies to v5: >>> >>> >>> http://blog.gerhards.net/2013/07/rsyslog-why-disk-assisted-queues-keep.html >>> >>> Rainer >>> >>> 2016-02-17 9:53 GMT+01:00 nicolas <[email protected]>: >>> >>> hi there, >>>> i'm having trouble with queues spool files, >>>> i'm using debian wheezy and rsyslog 5.8.11 from wheezy repo. >>>> >>>> here's my use case: >>>> 1 machine 'rsyslog-server' >>>> 1 machine 'rsyslog-client' >>>> logs from rsyslog-client are being forwarded to rsyslog-server, using >>>> tcp >>>> >>>> >>>> i tryed simulating connectivity problem by stopping rsyslog-server >>>> (service rsyslog stop). >>>> after doing that i saw queues files being created on the rsyslog-client >>>> (so far so good, although i don't have *.qi file being created). >>>> >>>> say for example, i have: >>>> /var/spool/rsyslog/remote.000001,2 and 3 files. >>>> >>>> finaly, i restart rsyslog service on 'rsyslog-server', >>>> and then i notice all queues files but one are disappearing, >>>> (queue being processed and sent to rsyslog-server). >>>> >>>> what i cannot understand is: why the remaing file is not being processed >>>> and emptied ? >>>> what happen to the queued logs that this file contains ? >>>> why are they not sent to rsyslog-server and the file size put back to >>>> zero >>>> or something like that? >>>> i'm alway ending up with one last remaining queue file that is just >>>> sitting there and is never processed >>>> how can i tell rsyslog to finish processing the queue ? >>>> >>>> thanks. >>>> >>>> >>>> here's my config: >>>> rsyslog-client >>>> ----------------- >>>> >>>> $WorkDirectory /var/spool/rsyslog >>>> >>>> # no throttling >>>> $SystemLogRateLimitInterval 0 >>>> $SystemLogRateLimitBurst 0 >>>> $IMUXSockRateLimitInterval 0 >>>> >>>> # queue options >>>> $MainMsgQueueSize 20000000 >>>> $ActionQueueSize 10000000 >>>> $ActionQueueType Disk >>>> $ActionQueueFileName rlog >>>> $ActionQueueMaxFileSize 5m >>>> $ActionQueueMaxDiskSpace 40g >>>> $ActionQueueTimeoutEnqueue 0 >>>> $ActionResumeRetryCount -1 >>>> $ActionResumeInterval 1 >>>> $ActionQueueSaveOnShutdown on >>>> >>>> >>>> # Forwarding only a few logs to rsyslog-server >>>> *.*;auth,authpriv.none,local3.none @@rsyslog-server.net:1668 >>>> kern.* @@rsyslog-server.net:1668 >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> rsyslog mailing list >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>> http://www.rsyslog.com/professional-services/ >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>> DON'T LIKE THAT. >>>> >>>> _______________________________________________ >>> rsyslog mailing list >>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>> http://www.rsyslog.com/professional-services/ >>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>> DON'T LIKE THAT. >>> >> >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
