[rsyslog] Does it make sense to have a queue with imfile+omrelp?

2016-12-28 Thread mostolog--- via rsyslog
Hi Does it make any sense to use queues when reading a file (imfile) and forwarding to a central location using RELP (omrelp) ? We would like to read & send events in a reliable way (reading offset/position is only updated if successfully received on server). but I don't understand why queue

Re: [rsyslog] Does it make sense to have a queue with imfile+omrelp?

2016-12-28 Thread mostolog--- via rsyslog
Even more: does it make sense to have queues when using omfile? El 28/12/16 a las 15:52, mosto...@gmail.com escribió: Hi Does it make any sense to use queues when reading a file (imfile) and forwarding to a central location using RELP (omrelp) ? We would like to read & send events in a reli

Re: [rsyslog] Does it make sense to have a queue with imfile+omrelp?

2016-12-28 Thread David Lang
On Wed, 28 Dec 2016, mostolog--- via rsyslog wrote: Even more: does it make sense to have queues when using omfile? usually not, it's usually less effort to write the data to the file than to move it to a new queue. You want a queue on an output (or on a ruleset with multiple outputs) if yo

Re: [rsyslog] Does it make sense to have a queue with imfile+omrelp?

2016-12-29 Thread mostolog--- via rsyslog
Thanks for your clarifying answers. El 28/12/16 a las 22:38, David Lang escribió: On Wed, 28 Dec 2016, mostolog--- via rsyslog wrote: Even more: does it make sense to have queues when using omfile? usually not, it's usually less effort to write the data to the file than to move it to a new