Ok, one thing I see is that you don't have a queue for the relp connection. It's
a good idea to have a separate queue for connections to other machines so that
if that connection isn't working, local logs will continue to be written
What's happening here is that rsyslog is writing a log to /var/log/syslog, then
tring to send the log to the remote system, and that action is failing, so
rsyslog keeps trying to send the message and never gets to processing the next
message. This also means that any problems that rsyslog itself tries to report
through the log aren't getting processed.
in the stderr output, rsyslog isn't actually starting because there is already a
copy running (or if there isn't, the pidfile /var/run rsyslogd.pid didn't get
cleaned up)
I also like to put all the module load and input declarations ahead of any
actions.
In current versions of rsyslog, you don't need to do "*.* action()" for an
action you want to take all the time, you can just do "action()" by itself.
The debug information that we probably need is not going to be reported until
the first message is being written. I would guess that it's not happen with the
encryption or something like that and so the encrypted relp connection is not
being established.
David Lang
On Fri, 16 Jan 2015, Muhammad Asif wrote:
Please have a look.
rsyslog.stderr : http://pastebin.com/qRt0C6wG
rsyslog.stdout : http://pastebin.com/RrZu5qWP
rsyslog.conf : http://pastebin.com/DykL3zSf
On Fri, Jan 16, 2015 at 12:47 PM, David Lang <da...@lang.hm> wrote:
it would also be useful to get the full configuration on the sender
David Lang
On Fri, 16 Jan 2015, Muhammad Asif wrote:
Hi All,
I am using tcpflood to send 10000 messages in one second and writing in
local files and sending to remote server on relp on tls.
On Local System
*.* /var/log/syslog
But I just receive one message in syslog and one message on remote
server's
relp.log and none in impstat file. Other messages are going well on tls.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
