El mié., 6 mar. 2019 a las 16:59, Peter Viskup via rsyslog (<[email protected]>) escribió: > > Within the debugging of the issues with DA queues not dequeuing, caused by > already fixed bug [1], realized the DA queue consists of - standard syslog > and input properties and also of localvars json array. > > [1] https://github.com/rsyslog/rsyslog/issues/1404 > > At first it is causing old versions of rsyslog (below 8.24) not able to > dequeue messages from these files. At second it is increasing the size of > queue. > > Seems the same is valid for in-memory part of the queue. Does it make sense > or would it be possible to implement some special mode in which the message > will be "queued" before the variables/templates will be applied (in similar > way the main queue is storing the messages)? Those templates with variables > processing might be applied as a part of dequeueing. >
Impossible - you cannot re-create the precise state of the message at that point. There is too much dynamic. Note that the template is not stored inside the message object. But variables are - because they *are* part of the message. Not storing the template of course also causes some impreciseness - but for them it is guaranteed that they are evaluated at the time of message processing. Rainer > Peter > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
