Hi everybody.
i am using centos 7 and syslog to log some activity for my application.
unfortunately it seems that i am generating a very large amount of logs
that need to be written to syslog, but most of these messages ate lost.
i have tested different things, but now, i have a pythonic code like this:
c = 0
while True:
syslog(str(c) + "messages saved" )
c += 1
print c
in code output, i get about 1,000,000 messages printed, but while im
watching the messages file, i only get 2000 and everything hangs. i have no
more messages. messing with the config file, i was able to boost it to 2000
messages, some hang time and then 2000 more messages( the counter would say
100,000'th message) witch is still a very very large data lost.
here is the config file that i currently have:
#### MODULES ####
# The imjournal module bellow is now used as a message source instead of
imuxsock.
$ModLoad imuxsock # provides support for local system logging (e.g. via
logger command)
$SystemLogRateLimitInterval 0
$SystemLogRateLimitBurst 0
$ModLoad imjournal # provides access to the systemd journal
$SystemLogRateLimitInterval 0
$SystemLogRateLimitBurst 0
#### RULES ####
*.* /var/log/messages
and this is part of the message that i get.
Aug 17 11:13:21 HP-Test Avapot[16635]: 782044-----------
Aug 17 11:13:21 HP-Test Avapot[16635]: 782044-----------
Aug 17 11:13:50 HP-Test journal: Suppressed 722551 messages from
/user.slice/user-0.slice
Aug 17 11:13:50 HP-Test journal: Suppressed 722551 messages from
/user.slice/user-0.slice
is there anyway to fix this problem? i need this amount of load really.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
