On Fri, 2 Nov 2018, Rory Toma via rsyslog wrote:
We have several rsyslog hosts that forward to a logstash server. It runs
great, then after about an hour, data slows down until we get a trickle.
I did not see anything last time I ran impstats, so I'm stuck. Here's my
config (centos7, rsyslog 8.39) Any advice how to debug this?
Well, logstash has lots of bottlenecks, is it keeping up or is it refusing to
accept more data?
what does impstats show? does it show the output to logstash being suspended?
until you know that the recipient is able to receive more logs, I don't know
that it's worth looking at the rsyslog config.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
