Re: [rsyslog] Any good guides for generating JSON formatted log messages on rsyslog client nodes for processing on rsyslog receiver node?

2017-09-18 Thread rsyslog-users-lists . adiscon . net
On 9/18/2017 12:02 PM, David Lang wrote: to send in JSON you need to create a custom template I use something like (typed from memory, may be errors) $template structured,"<%pri%>%timestamp% %hostname% %syslogtag% %$!%\n" Thanks for that. I found many examples where the templates were defined

Re: [rsyslog] How can I use high precision forwarding format, but still preserve the Postfix process name in forwarded messages?

2017-08-08 Thread rsyslog-users-lists . adiscon . net
On 8/8/17 2:30 AM, Rainer Gerhards wrote: 2017-08-08 6:36 GMT+02:00 deoren Does the 'RSYSLOG_SyslogProtocol23Format' format intentionally drop colons from the 'syslogtag' property? Well, this format is RFC5424, and RFC5424 does not have syslogtag as you know it. See RFC5424 Sect A.1 for the

Re: [rsyslog] rsyslog is recording more (~ 40 extra) log messages than expected from remote client

2016-12-21 Thread rsyslog-users-lists . adiscon . net
On 12/21/2016 10:43 AM, David Lang wrote: On Wed, 21 Dec 2016, rsyslog-users-lists.adiscon@whyaskwhy.org wrote: you can also set the retries so that it will only attempt to deliver a message X times before it gives up on that message. Thanks for mentioning that. Is there a setting or comm

Re: [rsyslog] rsyslog is recording more (~ 40 extra) log messages than expected from remote client

2016-12-21 Thread rsyslog-users-lists . adiscon . net
On 12/20/2016 11:09 PM, David Lang wrote: On Tue, 20 Dec 2016, rsyslog-users-lists.adiscon@whyaskwhy.org wrote: On 12/20/2016 1:38 AM, Benoit DOLEZ wrote: Hi, The ~40 messages are those of the window size : for performance reason, a train of messages are sent and acked globally. To ack e

Re: [rsyslog] rsyslog is recording more (~ 40 extra) log messages than expected from remote client

2016-12-20 Thread rsyslog-users-lists . adiscon . net
On 12/20/2016 1:38 AM, Benoit DOLEZ wrote: Hi, The ~40 messages are those of the window size : for performance reason, a train of messages are sent and acked globally. To ack each message independently you can try windowsize=1 with omrelp, but sending message synchronously is a very bad idea.

[rsyslog] rsyslog is recording more (~ 40 extra) log messages than expected from remote client

2016-12-19 Thread rsyslog-users-lists . adiscon . net
Hi, Thanks in advance for reading this, and many thanks to the devs for the app itself. I hope that someone knowledgeable can point out what I'm doing wrong or if my expectations are simply unreasonable. If I'm just completely missing something please point that out as well. Again, many than