On Fri, 17 May 2013, Hanish Bansal wrote:
I'm using CentOs 6.3.
rsyslog version : rsyslogd 5.8.10
I am maintaining Java logs through syslog using a syslog appender in log4j.
But its creating multiple-lines for long lines.
To avoid this i defined MaxMessageSize to 64k in "/etc/rsyslog.conf":
$MaxMessageSize 32768
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
After that i restarted rsyslog.
But its not working. Any suggestion?
I strongly suspect that the problem in on the log4j side. I believe that the
default log4j splits syslog messages at the 1K boundry and sends them as
multiple messages. You can see this if you do a 'tcpdump -s 0 -A port 514'
rsyslog has a log4j replacement up that fixes many of the problems in the stock
log4j http://www.rsyslog.com/tag/log4j/
there's also logback http://logback.qos.ch/ which is written by the original
author of log4j
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
