Re: [rsyslog] rsyslog 7.2.6 option to close tcp/udp sockets after mainqueue backlog

2018-09-06 Thread Prasad Koya via rsyslog
Thank you. We are looking at configuration options in https://www.rsyslog.com/doc/v7-stable/configuration/action/index.html Is there any page with bit more description of above configuration options. For example $ActionQueueSize Is above ActionQueueSize different from MainQ size? If this limit

Re: [rsyslog] rsyslog 7.2.6 option to close tcp/udp sockets after mainqueue backlog

2018-09-04 Thread David Lang
On Tue, 4 Sep 2018, Prasad Koya via rsyslog wrote: We are using rsyslog version 7.2.6. With omfwd module forwarding syslogs to a server over tcp, we see a situation (when syslog server is not reading the tcp socket or maybe a firewall rule added drops data to syslog server) where mainqueue build

[rsyslog] rsyslog 7.2.6 option to close tcp/udp sockets after mainqueue backlog

2018-09-04 Thread Prasad Koya via rsyslog
Hi We are using rsyslog version 7.2.6. With omfwd module forwarding syslogs to a server over tcp, we see a situation (when syslog server is not reading the tcp socket or maybe a firewall rule added drops data to syslog server) where mainqueue builds up to 10,000 messages at which point we are not