Hey Dave, can you check whether _this_ might be the issue: http://lists.adiscon.net/pipermail/rsyslog/2017-August/044683.html
I ran into the same problem (rsyslog locking up the CPU). Regards. Andreas _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.