ot; queue.saveonshutdown="on"
>> >> >> >> >>> >> > > queue.type="linkedlist"
>> >> >> >> >>> >> > > resumeretrycount="-1" queue.dequeueslowdown="1000")
>> >> &
hermes rsyslogd[2539]:
>> >> >> >> > rsyslogd[internal_messages]: 1779 messages lost due to
>> >> >> >> > rate-limiting (500 allowed within 5 seconds)
>> >> >> >> > 2022-12-13T02:23:56.001273-06:00 hermes rsyslogd[2539]:
>>
see overnight if that does the trick.
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> # date; grep -v "^\(#\|\s*$\)" /etc/rsyslog.conf ;date
> >> >> >> >&g
nf ;date
>> >> >> >> Mon Dec 12 13:56:12 CST 2022
>> >> >> >> module(load="imjournal" Ratelimit.Burst="3"
>> >> >> >> Ratelimit.Interval="1000" StateFile="imjournal.state")
&
t;> >> >>> >> > > you would do
> >> >> >>> >> > >
> >> >> >>> >> > > action(type="omfwd" target="10.0.0.1" port="514"
> protocol="tcp")
> >> >> >>> &
/var/log/secure
>> >> >> cron.* /var/log/cron
>> >> >> *.emerg :omusrmsg:*
>> >> >> ftp.* /var/log/vsftpd.log
>&
on # Save messages to disk on shutdown
> >> >> $ActionQueueType LinkedList # Use asynchronous processing
> >> >> $ActionResumeRetryCount -1# Infinite retries on insert
> failure
> >> >> ftp.*
> :ommysql:10.199.5.177,vsftpl
t; >> $ActionQueueSaveOnShutdown on # Save messages to disk on shutdown
>> >> $ActionQueueType LinkedList# Use asynchronous processing
>> >> $ActionResumeRetryCount -1 # Infinite retries on insert failure
>> >> authpriv.*
e retries on insert failure
> >> authpriv.*
> :ommysql:10.199.5.177,sftplogDB,hermesvsftplog,_
> >> $ActionName Admin
> >> $ActionQueueFileName ZenossQueue # Set file name, also enables disk
> mode
> >> $ActionQueueSaveOnShutdown on # Save mes
disk on shutdown
>> $ActionQueueType LinkedList # Use asynchronous processing
>> $ActionResumeRetryCount -1 # Infinite retries on insert failure
>> *.* @@10.199.1.160
>> Mon Dec 12 13:56:12 CST 2022
>>
>> On Mon, Dec
seful info
>> >> > >
>> >> > > > [4] How to modify imjournal rate limits?
>> >> > >
>> >> > > see
>> >> > >
>> >>
>> https://www.rsyslog.com/doc/v8-stable/configuration/modules/imjournal.h
hronous processing
> > $ActionResumeRetryCount -1# Infinite retries on insert failure
> > *.* @@10.199.1.160
> > Mon Dec 12 13:56:12 CST 2022
> >
> > On Mon, Dec 12, 2022 at 1:34 PM David Lang wrote:
> >
> >> did you do
ind
that
I
always
need to drastically increase the limits.
writing logs using the RSYSLOG_DebugFormat is adding the template
to the
file
ftp.* /var/log/ftp;RSYSLOG_DebugFormat (legacy format, add
template="RSYSLOG_DebugFormat" to that action() format)
the debug format is large,
; >> > >
> >> > > as I said below
> >> > >
> >> > > >> ftp.* /var/log/ftp;RSYSLOG_DebugFormat (legacy format, add
> >> > > template="RSYSLOG_DebugFormat" to that action() format)
> >> > >
> >&g
rsyslog
To: Rainer Gerhards
Cc: helices ,
rsyslog-users
Subject: Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently
We're still missing something:
module(load="imjournal" Ratelimit.Burst="3" Ratelimit.Interval="1000"
StateFile="imjournal.s
gt; > >
> > > feel free to keep asking questions.
> > >
> > > David Lang
> > >
> > >
> > > > ~ Mike
> > > >
> > > >
> > > >
> > > > On Thu, Dec 1, 2022 at 1:33 PM David Lang wrote:
>
nName Sftp
> > >>> $ActionQueueDequeueSlowdown 1000 # How long (in microseconds)
> > >> dequeueing
> > >>> should be delayed
> > >>> $ActionQueueFileName dbSftpQueue # Set file name, also enables disk
> > >> mode
> > >
vid Lang wrote:
>> >
>> >> it would be useful to convert to the action() syntax as it makes it
>> >> clearer
>> >> what's happening.
>> >>
>> >> Why are you pausing between writing logs? (this could be why you are
>> >> dropping
>> >&g
processed, etc.
> >>
> >> imjournal defaults to some fairly aggressive rate limiting, I find that
> I
> >> always
> >> need to drastically increase the limits.
> >>
> >> writing logs using the RSYSLOG_DebugFormat is adding the template to
sing so many messages?
~ Mike
On Thu, Dec 1, 2022 at 1:05 PM David Lang wrote:
please post your full config.
It would also help to log the message with the template
RSYSLOG_DebugFormat to a
file and find the log entry that is failing to insert.
my guess is that the quotes in the message are confusi
ncommon. How
> > can we avoid losing so many messages?
> >
> > ~ Mike
> >
> >
> > On Thu, Dec 1, 2022 at 1:05 PM David Lang wrote:
> >
> >> please post your full config.
> >>
> >> It would also help to log the message with the
ec 2022 13:26:47 -0600
From: helices
To: David Lang
Cc: helices via rsyslog
Subject: Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently
Thank you.
[1] rsyslog.conf
# date; grep -v "^\(#\|\s*$\)" /etc/rsyslog.conf ;date
Thu Dec 1 13:19:34 CST 2022
module(load=&
; David Lang
>
> On Thu, 1 Dec 2022, helices via rsyslog wrote:
>
> > Date: Thu, 1 Dec 2022 10:08:01 -0600
> > From: helices via rsyslog
> > To: rsyslog-users
> > Cc: helices
> > Subject: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittent
are trying to
process them too fast.
David Lang
On Thu, 1 Dec 2022, helices via rsyslog wrote:
Date: Thu, 1 Dec 2022 10:08:01 -0600
From: helices via rsyslog
To: rsyslog-users
Cc: helices
Subject: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently
# date; /bin/yum list rsyslog
# date; /bin/yum list rsyslog rsyslog-mysql ;date
Thu Dec 1 09:47:18 CST 2022
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: download.cf.centos.org
* epel: mirror.genesisadaptive.com
* extras: download.cf.centos.org
* remi-php56: mirror.pit.teraswitch.com
*
25 matches
Mail list logo
