On Mon, 10 Jun 2019, Heaton, Tobias wrote:

I configured impstats, updated rsyslog, restarted and awaited the failure. 
Tailing the busiest logs, behavior starts normal. Over the course of a few 
minutes, the logs seems to arrive in chunks...or at least appear to write that 
way to disk.

That behavior continues with logs populating incrementally slower and slower 
until it just stops. The impstats don't show anything of consequence - the 
repeated stats are all normal and the same both prior to and after the logs 
stop writing.

Rsyslog appears still running and impstats continue to populate again with no 
appreciable changes - very strange!

after it stops, does impstats show new messages arriving (and queues building)? or does it show outputs failing and messages being discarded?
or something else?

a couple cycles of the pstats output after it's failed would be useful

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to