IIRC we had an issue fixed that was related. Maybe you should check the ChangeLog. I guess an update to rsyslog current (8.2002.0) would solve the problem.
HTH Rainer El sáb., 18 abr. 2020 a las 20:16, David Lang via rsyslog (<[email protected]>) escribió: > > enable impstats so you can get reports on how many messages are in the queue > and > in the disk portion of the queue. > > David Lang > > On Sat, 18 Apr 2020, TaSK via rsyslog wrote: > > > Date: Sat, 18 Apr 2020 16:29:03 +0200 > > From: TaSK via rsyslog <[email protected]> > > To: [email protected] > > Cc: TaSK <[email protected]> > > Subject: [rsyslog] How to drain a queue? > > > > Setup is quite simple: > > - An application sending 5 log messages per second > > - A local rsyslogd server (8.1901) with the following simple setup: > > > > $WorkDirectory /var/spool/rsyslog > > module(load="imuxsock") > > module(load="imudp") > > input(type="imudp" port="514") > > *.* action ( > > type="omfwd" > > queue.type="LinkedList" > > queue.filename="forwarding" > > queue.size="1000" > > queue.maxFileSize="8m" > > target="192.168.100.30" > > protocol="tcp" > > port="514" > > ) > > *.* /var/spool/rsyslog/test-file > > > > - A server that dumps to disk. > > > > If I disconnect the server, messages starts piling up, and after a while > > ends up on disk in the expected file (forwarding.00000001). Messages are > > continuously being logged to the test-file, so everything is working. > > > > On reconnect, the messages immediately starts flowing again. But the queue > > is not drained. Thousands of messages remain on disk on the client side. > > > > After an hour I restarted rsyslogd on the client side. On restart, the > > file with the queued messages was deleted., but not sent. Thus, all > > messages that were buffered were lost. > > > > A pointer to where I have erred in my setup would be very appreciated! > > > > [TaSK] > > > > -- > > Tage Stabell-Kulø > > Pisa & Oslo > > _______________________________________________ > > rsyslog mailing list > > https://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > > LIKE THAT. > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
