I’m getting the following error trying to test using Disk-Assisted in memory queues. So the error is:
root@splunk:/var/spool/rsyslog# rsyslogd -N1 rsyslogd: version 8.2112.0, config validation run (level 1), master config /etc/rsyslog.conf rsyslogd: error during parsing file /etc/rsyslog.d/10-remote-syslog.conf, on or before line 76: syntax error on token '" queue.fileName=“vcenter.log” queue.workerThreads=' [v8.2112.0 try https://www.rsyslog.com/e/2207 ] rsyslogd: could not interpret master config file '/etc/rsyslog.conf'. [v8.2112.0 try https://www.rsyslog.com/e/2207 ] Relevant *.conf lines 72 – 79 below: ruleset(name="esxi20524" queue.type="linkedlist" queue.workerThreads="4" queue.workerThreadMinimumMessages="20000"){ action(type="omfile" file="/var/log/remote-syslog/esxi.log" ioBufferSize="64k" flushOnTXEnd="off" asyncWriting="on") } ruleset(name="vcenter20525” queue.type="linkedlist" queue.fileName=“vcenter.queue” queue.workerThreads="4" queue.workerThreadMinimumMessages="20000"){ action(type="omfile" FileCreateMode=“0644” fileOwner=“syslog” fileGroup=“adm” file="/var/log/remote-syslog/vcenter.log" ioBufferSize="64k" flushOnTXEnd="off" asyncWriting="on") } I am testing both DA, as well as the FileCrearteMode/Owner/Group properties as well. Anyway for queue.fileName I have tried ‘file’, ‘file.ext’ neither work. Unless I’m employing DA wrong from the beginning. I just read on an archived mailing list thread, about how it’s pretty silly to use disk.queues with omfile, maybe that’s my problem all along? [Jamf] Ben Hart IT Systems Administrator II 100 Washington Ave S, Minneapolis, MN 55401 [Phone] +00 1 989 424 0187 [Email] ben.h...@jamf.com [Web] www.jamf.com<https://www.jamf.com> [Facebook] [Twitter] [LinkedIn] [YouTube]
_______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
