No, rsyslog does async output for everything.
It is possible to force absolute reliability, but your performance will go
through the floor (on a system with a $5k PCI SSD I was able to get 2,000
logs/sec while the same machine with a SATA drive could do 400,000 logs/sec)
If you _really_ have some logs that you would rather the machine freeze and do
nothing rather than have the potential that the log doesn't make it to disk, we
can discuss those options, but that's really an unusual case
David Lang
On Tue, 6 May 2014, Thomas D. wrote:
Date: Tue, 06 May 2014 01:54:43 +0200
From: Thomas D. <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: "[email protected]" <[email protected]>
Subject: [rsyslog] Question regarding output file syncing
Hi,
when you search the net for "rsyslog.conf" files, you often find
examples where you set
auth,authpriv.* /var/log/auth.log
whereas for all the other facilities/log files you set
*.info;mail.none;authpriv.none;cron.none -/var/log/messages
(the important thing is the "dash" before the log file)
From my understanding the user wanted to make sure, that every
authentication event will be logged on disk, whereas for all the other
logs performance was chosen.
So far right, not?
Now the question is: Is this still valid for v7.6+?
<http://www.rsyslog.com/doc/v3compatibility.html> says that syncing was
turned off in general, so that you no longer need to set a dash. Still
right?
Would you still recommend to enable syncing for important files like
"/var/log/auth.log" or not? And if you recommend syncing, this can be
rewritten in RainerScript (new syntax) like
auth,authpriv.* action(
type="omfile"
File="/var/log/auth.log"
Sync="on"
)
right?
Thanks for all your answers!
-Thomas
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
