I see there is rate limiting for certain types of input
http://blog.gerhards.net/2012/10/rate-limiting-in-rsyslog-732.htm
<http://blog.gerhards.net/2012/10/rate-limiting-in-rsyslog-732.html>
Is it possible to do rate limiting on imfile?
I tried this with rsyslog v 8.12:
input(name="imfile" file="/var/log/mybadapp.log" ratelimit.burst="100")
rsyslogd -N 1 says "parameter ratelimit.burst not known"
I'm trying to do something like I can do with fluentd - in a file input
I can specify read_lines_limit
I suppose I could do something with the input queue, but I want to do
rate limiting before the log data even gets to the queue - I want to
read slowly from the file.
I could also do some extra-process tricks, like putting some sort of
named pipe script intermediary between the file and rsyslog, and have
rsyslog read from the pipe instead, and have the script do the rate
limiting, but that's an "inelegant" solution.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
