[rsyslog] RFC 5424 and rsyslog

2014-12-08 Thread Brett Delle Grazie
Hi, I'm using 7.4.4-1ubuntu2.3 (on Ubuntu). I'd like to use RFC 5424 as both the transport (from client to server) and file-based storage for an rsyslog server with the intention to push the messages into Elastic Search (always keeping a centralised file copy for permanent store). >From browsing

[rsyslog] InputTCPMaxSessions and MaxOpenFiles relation

2014-12-08 Thread Peter Viskup
Hi all, we observed issues once setting InputTCPMaxSessions above the default MaxOpenFiles process limits. The rsyslog reached MaxOpenFiles limit and just crashed. Setting the value of InputTCPMaxSessions should increase MaxOpenFiles or rsyslog should not start or complain about it at least. There

Re: [rsyslog] [Lognorm] Race condition in deletion of json-objects with 'event.tags'

2014-12-08 Thread singh.janmejay
+ rsyslog-users (FYI) -- Regards, Janmejay PS: Please blame the typos in this mail on my phone's uncivilized soft keyboard sporting it's not-so-smart-assist technology. On Dec 9, 2014 4:49 AM, "singh.janmejay" wrote: > Sorry, I forgot to post that once I removed the tags from each rule, > segf

Re: [rsyslog] InputTCPMaxSessions and MaxOpenFiles relation

2014-12-08 Thread David Lang
On Mon, 8 Dec 2014, Peter Viskup wrote: Hi all, we observed issues once setting InputTCPMaxSessions above the default MaxOpenFiles process limits. The rsyslog reached MaxOpenFiles limit and just crashed. Setting the value of InputTCPMaxSessions should increase MaxOpenFiles or rsyslog should not