Mikel, sorry, I was busy yesterday. See inline... On Thu, 2008-11-27 at 10:07 +0100, Mikel Jimenez wrote:
> Last question: > Why could be the reason, if I block internet in this host, and when pass > 10-12 hours, obviously not logging to remote (because firewall), but why > not locally to? > > I do: > logger "message" > > And I have not notice in /var/log/syslog or /var/log/messages, and in > normal situations yes... If I am right (the update will prove that) the reason is that the local log socket is not read (because rsyslog delays imuxsock) and thus fills up. Then, other processes trying to write to that socket will block during the write process. Please note that the rsyslog core will discard messages after some time, but the rate at which this happens is too slow to get the system back to normal. As I said, this should disappear with the recent stable version. HTH Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
