On Tue, 21 Jan 2020, John Chivian via rsyslog wrote:
Regardless of how your config file is setup, or whether or not you implement queuing, if you want to do those two things with all log messages, and want to guarantee that a full local file system doesn't prevent delivery to network destinations (although it might for other reasons), then simply take the network send action before you attempt to write locally. It is after all a serial pipeline.
That is not good enough, if the local write blocks, it will not finish processing that log message and never move on to process the next one.
you either need queues or limited retries to throw away messages so you can continue.
David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

