David,I've attached two full sets of pstats logs, compressed. Here's just the part about the spooled files:
<46>1 2017-05-03T00:57:09.577539-05:00 cst79-1 rsyslogd-pstats - - - rule.controllers.syslog[DA]: size=20374016 enqueued=20374016 full=0 discarde
d.full=0 discarded.nf=0 maxqsize=20374016<46>1 2017-05-03T00:57:09.577542-05:00 cst79-1 rsyslogd-pstats - - - rule.controllers.syslog: size=393689 enqueued=52658845 full=0 discarded.full
=0 discarded.nf=0 maxqsize=660835<46>1 2017-05-03T01:57:09.675067-05:00 cst79-1 rsyslogd-pstats - - - rule.controllers.syslog[DA]: size=20374016 enqueued=20374016 full=0 discarde
d.full=0 discarded.nf=0 maxqsize=20374016<46>1 2017-05-03T01:57:09.675070-05:00 cst79-1 rsyslogd-pstats - - - rule.controllers.syslog: size=462138 enqueued=52727294 full=0 discarded.full
=0 discarded.nf=0 maxqsize=660835
cst79-1:~ # rsyslogd -v
rsyslogd 8.4.0, compiled with:
FEATURE_REGEXP: Yes
GSSAPI Kerberos 5 support: Yes
FEATURE_DEBUG (debug build, slow code): No
32bit Atomic operations supported: Yes
64bit Atomic operations supported: Yes
memory allocator: system default
Runtime Instrumentation (slow code): No
uuid support: Yes
Number of Bits in RainerScript integers: 64
Thanks,
David
On 05/04/2017 02:41 PM, David Lang wrote:
look for the lines in the pstats messages that have DA in them, they will tell you what's happening with the spool files.If you can post a couple full sets of the pstats logs it would help see what's happening.also, what version are you running? David Lang On Thu, 4 May 2017, David Gloe wrote:On one of our servers, rsyslog began spooling log messages that should have been written to a local file. After restarting rsyslog, new messages go to the file as we expect, but the spooled messages never get cleared out.We now have 11,189 spool files that we’re not sure how to save._______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhardsNOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
logsystem-20170503.gz
Description: GNU Zip compressed data
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
