Some additional information: We see the data coming on UDP with tcpdump in time on the rsyslog server, so we know, that the cisco device logs everything in time. Just the log data in the log file is with delay.
Uli -----Ursprüngliche Nachricht----- Von: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog-boun...@lists.adiscon.com] Im Auftrag von Herbst, Ulrich Gesendet: Donnerstag, 4. April 2013 13:44 An: rsyslog@lists.adiscon.com Betreff: [rsyslog] Input from udp/514 - output appears in logfile with delay Hi, We have a rsyslog 5.8.1: Input comes on UDP/514 (from a cisco device), output is directed to a logfile - but there it appears with a delay from about 60 seconds. This is a low-throughput input, so maybe, our file buffer just fills to slow. Can I configure that somewhere so that this is written with short delay to my logfile ? I've found: $OMFileFlushInterval But the documentation for this parameter is not useful at all ("Defines a template to be used for the output.") for me. I've tried setting this to "1" - but the delay is just about 1 minute (ok, maybe the "1" does mean minutes, not seconds....) Any Ideas ? Uli _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
