create a combined config file by starting rsyslog with the -o flag
something like -o /etc/rsyslog.conf.generated
then look at that combined file to see where it's set. If you can't find
anything, post the generated file here.
David Lang
On Wed, 27 May 2020, Joan via rsyslog wrote:
Date: Wed, 27 May 2020 16:26:00 +0200
From: Joan via rsyslog <[email protected]>
To: rsyslog-users <[email protected]>
Cc: Joan <[email protected]>
Subject: [rsyslog] Rsyslog check complaining from maxLinesAtOnce not present
on configs
I am using rsyslg 8.2004.0-0adiscon1bionic1 from adiscon repository, when
I check the configuration, there's an error
# rsyslogd -f/etc/rsyslog.conf -N1
rsyslogd: version 8.2004.0, config validation run (level 1), master config
/etc/rsyslog.conf
rsyslogd: parameter "maxLinesAtOnce" not permited in inotify mode -
ignored [v8.2004.0 try https://www.rsyslog.com/e/2222 ]
rsyslogd: parameter "maxLinesAtOnce" not permited in inotify mode -
ignored [v8.2004.0 try https://www.rsyslog.com/e/2222 ]
The problem is that I look for this maxLinesAtOnce in the whole
configuration under /etc/ and I can't find it. The config file that started
the issue is this one (slightly adapted from an example on internet)
$PrivDropToGroup adm
$WorkDirectory /var/spool/rsyslog
# Nginx access file:
$InputFileName /var/log/nginx/access.log
$InputFileTag nginx-access:
$InputFileStateFile stat-nginx-access
$InputFileSeverity info
$InputFilePersistStateInterval 20000
$InputRunFileMonitor
#Nginx Error file:
$InputFileName /var/log/nginx/error.log
$InputFileTag nginx-error:
$InputFileStateFile stat-nginx-error
$InputFileSeverity error
$InputFilePersistStateInterval 20000
$InputRunFileMonitor
#Add a tag for nginx events
$template LogglyFormatNginx,"<%pri%>%protocol-version%
%timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid%
[TOKEN@41058 tag=\"nginx\"] %msg%\n"
if $programname == 'nginx-access' then @@graylog.example.com:514
;RSYSLOG_SyslogProtocol23Format
if $programname == 'nginx-access' then ~
if $programname == 'nginx-error' then @@graylog.example.com:514
;RSYSLOG_SyslogProtocol23Format
if $programname == 'nginx-error' then ~
Where should I look for this maxLinesAtOnce setting?
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
