rsyslogd -version
rsyslogd 8.37.0-13.el8, compiled with:
PLATFORM: x86_64-redhat-linux-gnu
PLATFORM (lsb_release -d):
FEATURE_REGEXP: Yes
GSSAPI Kerberos 5 support: Yes
FEATURE_DEBUG (debug build, slow code): No
32bit Atomic operations supported: Yes
64bit Atomic operations supported: Yes
memory allocator: system default
Runtime Instrumentation (slow code): No
uuid support: Yes
systemd support: Yes
Number of Bits in RainerScript integers: 64
input(type="imkafka" topic="mytopic"
broker=["x.x.x.96:9092,x.x.x.97:9092,x.x.x.98:9092"]
ruleset="relp_1514"
consumergroup="mygroup"
)
ruleset(name="relp_1514"
queue.size="2500000"
queue.workerThreads="12"
queue.spoolDirectory="/var/log/spool"
queue.saveonshutdown="on"
queue.filename="main-relp-queue"
)
{
action(type="mmjsonparse")
if $parsesuccess == "OK" then {
action(type="omfile"
dynaFile="cee-json-parsed-ok"
template="json_msg"
queue.type="linkedlist"
queue.filename="write-onprem-queue"
queue.maxdiskspace="3G"
queue.spoolDirectory="/var/log/spool"
queue.dequeueBatchSize="8192"
queue.saveonshutdown="on"
dynaFileCacheSize="100000"
asyncWriting="on"
dirCreateMode="0755"
queue.workerThreads="6"
queue.size="2500000"
ioBufferSize="512k"
flushOnTXEnd="off"
)
}
else if $parsesuccess == "FAIL" then {
action(name="write_to_disk_nonjson" type="omfile"
queue.type="linkedlist"
queue.filename="write-onprem-queue"
queue.maxdiskspace="100G"
queue.spoolDirectory="/var/log/spool"
queue.saveonshutdown="on"
dynaFile="RemoteLogSavePath"
dynaFileCacheSize="100000"
asyncWriting="on"
dirCreateMode="0755"
)
}
}
----- systemd unit file
[Unit]
Description=System Logging Service
;Requires=syslog.socket
Wants=network.target network-online.target
After=network.target network-online.target
Documentation=man:rsyslogd(8)
Documentation=http://www.rsyslog.com/doc/
[Service]
Type=notify
EnvironmentFile=-/etc/sysconfig/rsyslog
ExecStart=/usr/sbin/rsyslogd -n $SYSLOGD_OPTIONS
UMask=0066
StandardOutput=null
Restart=on-failure
# Increase the default a bit in order to allow many simultaneous
# files to be monitored, we might need a lot of fds.
LimitNOFILE=16384
KillMode=control-group
TimeoutSec=300
[Install]
WantedBy=multi-user.target
;Alias=syslog.service
--
Sent from: http://rsyslog-users.1305293.n2.nabble.com/
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
