we would need to see your full config, but if rsyslog fills it's queue (commonly
because you have it configured to send to a different machine via TCP and the
remote machine is down), it is unable to accept new messages, and the system
will stall.
This is part of the spec for the syslog protocol, not a bug to be fixed in
rsyslog.
There are things that are available to help throw away messages faster when the
queue fills up, I don't remember when they were added. look for the discard
severity and high/low watermark options for a queue.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.