enable impstats so you can get reports on how many messages are in the queue and
in the disk portion of the queue.
David Lang
On Sat, 18 Apr 2020, TaSK via rsyslog wrote:
Date: Sat, 18 Apr 2020 16:29:03 +0200
From: TaSK via rsyslog <[email protected]>
To: [email protected]
Cc: TaSK <[email protected]>
Subject: [rsyslog] How to drain a queue?
Setup is quite simple:
- An application sending 5 log messages per second
- A local rsyslogd server (8.1901) with the following simple setup:
$WorkDirectory /var/spool/rsyslog
module(load="imuxsock")
module(load="imudp")
input(type="imudp" port="514")
*.* action (
type="omfwd"
queue.type="LinkedList"
queue.filename="forwarding"
queue.size="1000"
queue.maxFileSize="8m"
target="192.168.100.30"
protocol="tcp"
port="514"
)
*.* /var/spool/rsyslog/test-file
- A server that dumps to disk.
If I disconnect the server, messages starts piling up, and after a while
ends up on disk in the expected file (forwarding.00000001). Messages are
continuously being logged to the test-file, so everything is working.
On reconnect, the messages immediately starts flowing again. But the queue
is not drained. Thousands of messages remain on disk on the client side.
After an hour I restarted rsyslogd on the client side. On restart, the
file with the queued messages was deleted., but not sent. Thus, all
messages that were buffered were lost.
A pointer to where I have erred in my setup would be very appreciated!
[TaSK]
--
Tage Stabell-Kulø
Pisa & Oslo
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
