Do you have any rsyslog error messages "in front of" the quoted ones? They look like the are second in an error report - but may unfortunately be the only ones.
Nothing looks obviously wrong to me. Rainer El lun., 19 nov. 2018 a las 18:02, Mike Schleif (<[email protected]>) escribió: > > What does the following mean? > > How can we correct this? > > We just discovered missing rsyslog messages in our databases, going back to > February 2018. > > /var/log/messages shows errors like these: > > Feb 3 02:16:33 hermes rsyslogd[30458]: The error statement was: insert > into SystemEvents (Message, Facility, FromHost, Priority, > DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values ('Connection > reset by 172.99.99.100 port 39596 [preauth]', 10, 'hermes', 6, > '20180203021157', '20180203021157', 1, 'sshd[17977]:') [v8.32.0 try > http://www.rsyslog.com/e/2218 ] > > Nov 15 11:24:23 hermes rsyslogd[701]: The error statement was: insert into > SystemEvents (Message, Facility, FromHost, Priority, DeviceReportedTime, > ReceivedAt, InfoUnitID, SysLogTag) values ('pam_unix(sshd:session): session > opened for user ms50013 by (uid=0)', 10, 'hermes', 6, '20181115112422', > '20181115112422', 1, 'sshd[12048]:') [v8.39.0 try > http://www.rsyslog.com/e/2218 ] > > Nov 15 11:39:43 hermes rsyslogd[701]: The error statement was: insert into > SystemEvents (Message, Facility, FromHost, Priority, DeviceReportedTime, > ReceivedAt, InfoUnitID, SysLogTag) values ('pam_unix(sshd:session): session > closed for user ms50013', 10, 'hermes', 6, '20181115113943', > '20181115113943', 1, 'sshd[12048]:') [v8.39.0 try > http://www.rsyslog.com/e/2218 ] > > > Below are ommysql configurations for two connections to same host, > different > databases. We do not find any of these failures for ActionName Ftp, only > Sftp. > > $ActionName Ftp > $ActionQueueDequeueSlowdown 1000 # How long (in microseconds) dequeueing > should be delayed > $ActionQueueFileName dbFtpQueue # Set file name, also enables disk mode > $ActionQueueSaveOnShutdown on # Save messages to disk on shutdown > $ActionQueueType LinkedList # Use asynchronous processing > $ActionResumeRetryCount -1 # Infinite retries on insert failure > ftp.* > :ommysql:172.99.99.125,vsftplog,hermesvsftplog,_PASSWORD_ > > > $ActionName Sftp > $ActionQueueDequeueSlowdown 1000 # How long (in microseconds) dequeueing > should be delayed > $ActionQueueFileName dbSftpQueue # Set file name, also enables disk mode > $ActionQueueSaveOnShutdown on # Save messages to disk on shutdown > $ActionQueueType LinkedList # Use asynchronous processing > $ActionResumeRetryCount -1 # Infinite retries on insert failure > authpriv.* > :ommysql:172.99.99.125,sftplogDB,hermesvsftplog,_PASSWORD_ > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
