If you give each action a unique name then you will have usable pstats that can be tracked for transmissions statistics over time. This type of rsyslog telemetry monitoring can be easily accomplished by feeding pstats into any decent event monitoring tool.
Regards, > On Feb 16, 2021, at 07:44, D. UTEAU via rsyslog <[email protected]> > wrote: > > Hello, > > > > I am using rsyslog to transfer logs to a primary server. If this server is > unreachable, the transfer is done on a secondary server. > > This can be done with 'Failover Syslog Server' mechanism like this > > ruleset(name="forwarding" queue.type="linkedList" queue.filename="fwdq") { > > action(type="omfwd" target="primary-syslog.example.com" port="10514" > > protocol="tcp") > > action(type="omfwd" target="secondary-1-syslog.example.com" > port="10514" > > action.execOnlyWhenPreviousIsSuspended="on") > > action(type="omfwd" target="secondary-2-syslog.example.com" > port="10514" > > action.execOnlyWhenPreviousIsSuspended="on") > > action(type="omfile" tag="failover" file="/var/log/localbuffer" > > action.execOnlyWhenPreviousIsSuspended="on") > > } > > > > But I also would like to be warned when the transfer is nominal, that is to > say logs go to primary server, or degraded, that is to say logs go to > secondary server. I had the idea to use omprog output module, between the 2 > omfwd, to call a process to warn me, but I guess the treatment will stop > when the command is ok, and the failover will not be handled. Moreover, the > command will be called for each received log in degraded mode. > > > > What is the best approach according to you? Output Modules? Logs analyze? > Connections polling? > > > > Thank you for your help. > > David > > > > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
