rate limiting is defined at module load time, not at runtime. one of the reasons
to change to rainerscript is that it makes it clearer as to when things are
defined, you would need to change the module load command (using the old style
config, your $ rate limiting lines would need to be in the config ahead of the
actual module load, you could not add them later in the config)
David Lang
On Wed, 29 May 2019, Marcin Adamski via rsyslog wrote:
Date: Wed, 29 May 2019 14:30:45 +0200
From: Marcin Adamski via rsyslog <[email protected]>
To: [email protected]
Cc: Marcin Adamski <[email protected]>
Subject: [rsyslog] How to modify rate limiting parameters after module load
Hi
I am looking for a way to change parameters related to rate limiting after
imuxsock module is loaded. Is it possible?
The use case here is as follows. /etc/rsyslog.conf is provided by a
separate team that maintains platform used by many projects. Then each
project adds its own configuration files that are included by the main
file. Thanks to that we have modularity. Rate limiting is disabled by
default for other projects, but in my project I would like to enable it.
/etc/rsyslog.conf looks llike this:
module(load="immark") # provides --MARK-- message capability
module(load="imuxsock") # provides support for local system logging (e.g.
via logger command)
module(load="imklog") # kernel logging (formerly provided by rklogd)
template(
name="precise"
type="string"
string="%timereported:1:10:date-rfc3339%
%timereported:12:26:date-rfc3339% %timereported:27:33:date-rfc3339%
%HOSTNAME% %syslogtag% <%syslogpriority-text:::uppercase%> %msg%\n"
)
module(load="builtin:omfile"
template="precise"
fileCreateMode="0640"
dirCreateMode="0755"
)
include(file="/mnt/config/rsyslog/*.conf")
include(file="/etc/rsyslog.d/*.conf")
I can't use $SystemLogRateLimitBurst and $SystemLogRateLimitInterval in my
configuration file, because it is not compatible with RainerScript. How do
I do it instead?
Regards
Marcin Adamski
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
