Hi I have 16 servers that log to a common rsyslog server, and I am making some changes to the setup as it has not been running well.
I am running relp over port 514, and this morning 14 of the servers are running fine, but 2 of them have stopped logging 3-4 hours ago, and after some debugging I have found that there seems to be a networking issue on these 2 servers. When i run "netstat -anpt" I can see that there are bytes in the recieve queue all the time on the 2 failing servers, on the common server there are no issues. The servers are running RHEL7.7, I have tried to disable selinux, just to see if it made any difference, but it did not. If a compare iotop and the netstat output, I can see that the number of bytes in the receiving queue changes when rsyslog goes to the top in iotop, but it never goes to 0, so it is a bit strange. Has anyone seen something like this before, or can you give some idea how to debug this ? Best regards Allan Jacobsen _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
