] rsyslog dropping logs
Only one configuration there.
I have all my messages going to directories by host so your method
doesn't
seem to be working.
I did a tcpdump only on port 514 for a few seconds and I had like 2000
messages.
:Luke Marrott
On Fri, Nov 9, 2012 at 2:48 PM, David Lang
Lang
On Thu, 29 Nov 2012, Luke Marrott wrote:
Date: Thu, 29 Nov 2012 13:17:24 -0700
From: Luke Marrott luke.marr...@gmail.com
Reply-To: rsyslog-users rsyslog@lists.adiscon.com
To: rsyslog-users rsyslog@lists.adiscon.com
Subject: Re: [rsyslog] rsyslog dropping logs
My debug was about 200MB
:
Date: Fri, 9 Nov 2012 15:14:32 -0700
From: Luke Marrott luke.marr...@gmail.com
Reply-To: rsyslog-users rsyslog@lists.adiscon.com
To: rsyslog-users rsyslog@lists.adiscon.com
Subject: Re: [rsyslog] rsyslog dropping logs
Only one configuration there.
I have all my messages going
-0700
From: Luke Marrott luke.marr...@gmail.com
Reply-To: rsyslog-users rsyslog@lists.adiscon.com
To: rsyslog-users rsyslog@lists.adiscon.com
Subject: Re: [rsyslog] rsyslog dropping logs
Only one configuration there.
I have all my messages going to directories by host so your method doesn't
So I'm wondering if someone can take a look at my configuration and tell me
why rsyslog doesn't seem to be logging everything that gets sent to the
server?
I'm listening on 514 and when I do a TCP dump I see the message come in,
but for example this morning we had a power outage and the switch
On Fri, 9 Nov 2012, Luke Marrott wrote:
So I'm wondering if someone can take a look at my configuration and tell me
why rsyslog doesn't seem to be logging everything that gets sent to the
server?
I'm listening on 514 and when I do a TCP dump I see the message come in,
but for example this
Sorry. I wasn't real clear. The server runs on a big VM in another location
completely. No issues with the server during this time. This has been an
ongoing thing. I'm running Splunk on the same box and if I turn off rsyslog
and turn splunk on the same port it gets all the messages that don't seem
On Fri, 9 Nov 2012, Luke Marrott wrote:
Sorry. I wasn't real clear. The server runs on a big VM in another location
completely. No issues with the server during this time. This has been an
ongoing thing. I'm running Splunk on the same box and if I turn off rsyslog
and turn splunk on the same
Full configuration:
[root@hostname]# cat /etc/rsyslog.conf
# if you experience problems, check
# http://www.rsyslog.com/troubleshoot for assistance
# rsyslog v3: load input modules
# If you do not load inputs, nothing happens!
# You may need to set the module load path if modules are not found.
, divide
by 300, and that's your rate per second.
- Original Message -
From: Luke Marrott luke.marr...@gmail.com
To: rsyslog-users rsyslog@lists.adiscon.com
Sent: Friday, November 9, 2012 3:07:02 PM
Subject: Re: [rsyslog] rsyslog dropping logs
Full configuration:
[root@hostname
Nov 2012 13:07:02 -0700
From: Luke Marrott luke.marr...@gmail.com
Reply-To: rsyslog-users rsyslog@lists.adiscon.com
To: rsyslog-users rsyslog@lists.adiscon.com
Subject: Re: [rsyslog] rsyslog dropping logs
Full configuration:
[root@hostname]# cat /etc/rsyslog.conf
# if you experience problems
2012 13:07:02 -0700
From: Luke Marrott luke.marr...@gmail.com
Reply-To: rsyslog-users rsyslog@lists.adiscon.com
To: rsyslog-users rsyslog@lists.adiscon.com
Subject: Re: [rsyslog] rsyslog dropping logs
Full configuration:
[root@hostname]# cat /etc/rsyslog.conf
# if you experience problems
@lists.adiscon.com
Subject: Re: [rsyslog] rsyslog dropping logs
Only one configuration there.
I have all my messages going to directories by host so your method doesn't
seem to be working.
I did a tcpdump only on port 514 for a few seconds and I had like 2000
messages.
:Luke Marrott
On Fri
On Wed, 23 Jul 2008, Kielek, Samuel wrote:
Mike,
You're using some v3 features that will not work with v2 such as the
conditional filtering. I'll email you off list with a copy of my config
(also using RHEL 5.2 here).
Thanks, I upgraded to a v3 version with my old config, same issue. Used
14 matches
Mail list logo
