we would need to see your full config, but if rsyslog fills it's queue (commonly because you have it configured to send to a different machine via TCP and the remote machine is down), it is unable to accept new messages, and the system will stall.

This is part of the spec for the syslog protocol, not a bug to be fixed in rsyslog.

There are things that are available to help throw away messages faster when the queue fills up, I don't remember when they were added. look for the discard severity and high/low watermark options for a queue.

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to