I am kind of at the end of my rope on this one, so I thought I would ask the community. I don't have a lot of information, but last week we had an incident on our rsyslog collector system. Essentially, the disk space in the file system where we keep the log files filled up. The rsyslog spool area filled up as well. What seemed to cause this were several systems that began logging excessively - 30+ GB log files within minutes.
I was able to add some disk space and stop rsyslog on systems that were problematic; however, I simply cannot tell why the incident happened. Has anyone seen this type of behavior with rsyslog? On our collector system we are running v. 5.8.5. We are still migrating our client systems to 5.8.5 so most of them are still at 5.4.0 of rsyslog. Any experiences or insight is greatly appreciated. Thanks, Jeff Jeffrey Poling System Administrator | Information Systems Moody Bible Institute 820 N. LaSalle Blvd., Chicago, IL 60610 312-329-8968 www.moodyministries.net<http://www.moodyministries.net> >From the Word. To Life. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/