David, I see how to modify it, instead of an action block, but I don't see how it can be applied in the context of my rsyslog.conf, which doesn't have any action blocks. I'm using: https://www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html#dynaFileCacheSize as my reference.
I'm guessing the section of my config file I need to modify is: ### DEAL WITH REMOTE MESSAGES ######################################## $DirGroup secopsr $FileGroup secopsr $umask 0000 $DirCreateMode 0754 $FileCreateMode 0644 $template RemoteClient,"/var/remote/logs/%HOSTNAME%/%HOSTNAME%-%$NOW%.log" :inputname , isequal , "imudp" ?RemoteClient :inputname , isequal , "imtcp" ?RemoteClient :fromhost-ip , !isequal , "127.0.0.1" stop ######################################################################## Just not seeing how to modify it the right way to set the dynaFileCacheSize value. Radesh -----Original Message----- From: David Lang <da...@lang.hm> Sent: Friday, August 02, 2019 8:06 PM To: Singh, Radesh <radesh_si...@csx.com> Cc: David Lang <da...@lang.hm>; Singh, Radesh via rsyslog <rsyslog@lists.adiscon.com> Subject: RE: [E]Re: [rsyslog] Missing messages fix the dynafilecachesize, that is probably why you are loosing your inbound logs. this should help keep you from loosing your outbound logs David Lang On Fri, 2 Aug 2019, Singh, Radesh wrote: > Date: Fri, 2 Aug 2019 23:59:21 +0000 > From: "Singh, Radesh" <radesh_si...@csx.com> > To: David Lang <da...@lang.hm> > Cc: "Singh, Radesh via rsyslog" <rsyslog@lists.adiscon.com> > Subject: RE: [E]Re: [rsyslog] Missing messages > > :) I went big... > sysctl net.core.wmem_max > net.core.wmem_max = 134217728 > > then cycled rsyslog. > > > -----Original Message----- > From: David Lang <da...@lang.hm> > Sent: Friday, August 02, 2019 7:54 PM > To: Singh, Radesh <radesh_si...@csx.com> > Cc: David Lang <da...@lang.hm>; Singh, Radesh via rsyslog > <rsyslog@lists.adiscon.com> > Subject: RE: [E]Re: [rsyslog] Missing messages > > On Fri, 2 Aug 2019, Singh, Radesh wrote: > >> Outbound buffers, would that be net.core.wmem_max? > > yes, and I think it's in bytes, set is something nice and large, > several tens of MB > > from a random web page, for 25MB 26214400 > > David Lang > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
