No, not looking for unbuffered mode, but since we were converting from the old
to new config style, and many of our heavily used logs prefixed with '-', just
wanted to be sure that we weren't accidentally going backward to unbuffered
mode.
If anything, we'd more likely want to increase the size of the buffer for
specific
logs, and knowing that '-' didn't change any of the defaults anymore is quite
helpful.
Thanks to all for clarifying.
From: rsyslog@lists.adiscon.com At: 09/29/22 19:01:44 UTC-4:00To:
rsyslog@lists.adiscon.com
Cc: da...@lang.hm
Subject: Re: [rsyslog] Equivalent omfile action to a file prefixed by '-'?
it is possible to get the 'unbuffered' mode, but you have to work hard to do it
and the performance will utterly suck (even if you have a
battery-backed-ramdisk, the system calls and serialization will cripple your
performance)
I think this has been the default since at least rsyslog 3, around 20 years ago.
David Lang
On Fri, 30 Sep 2022, Rainer Gerhards via rsyslog wrote:
> Date: Fri, 30 Sep 2022 00:02:28 +0200
> From: Rainer Gerhards via rsyslog <rsyslog@lists.adiscon.com>
> To: rsyslog-users <rsyslog@lists.adiscon.com>
> Cc: Rainer Gerhards <rgerha...@hq.adiscon.com>
> Subject: Re: [rsyslog] Equivalent omfile action to a file prefixed by '-'?
>
> The - does not throw a syntax error, but is ignored for many years. iIRC it
> caused a sync after each write, which would be crazy for actual systems.
>
> Rainer
>
> Sent from phone, thus brief.
>
> John Chivian via rsyslog <rsyslog@lists.adiscon.com> schrieb am Do., 29.
> Sep. 2022, 23:25:
>
>> If I am not mistaken, buffering is the default in the new syntax such that
>> it is not necessary to state it explicitly. The maintainers will know for
>> sure.
>>
>>
>>
>>> On Sep 29, 2022, at 15:54, Gordon Marler (BLOOMBERG/ 120 PARK) via
>> rsyslog <rsyslog@lists.adiscon.com> wrote:
>>>
>>> In the old style of rsyslog configuration, you can say that you want to
>> buffer a file, rather than flush it after every write, with syntax like
>> this (prefixing the filename with '-'):
>>>
>>> local4.info -/var/log/mylog
>>>
>>> Reading the documentation of the omfile Output Module, I don't see an
>> exact way to specify the exact same end result documented, such that you
>> could write something like:
>>>
>>> local4.info {
>>> action( type="omfile" file="/var/log/mylog" ...)
>>> }
>>>
>>> I see all the following, but not sure of the exact combined config to
>> equate to the old syntax:
>>>
>>> * flushInterval
>>> * asyncWriting
>>> * flushOnTxEnd
>>> * ioBufferSize
>>> * sync
>>>
>>> Thanks for any insight into achieving this goal.
>>>
>>> GM
>>> _______________________________________________
>>> rsyslog mailing list
>>> https://lists.adiscon.net/mailman/listinfo/rsyslog
>>> http://www.rsyslog.com/professional-services/
>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>> DON'T LIKE THAT.
>>
>> _______________________________________________
>> rsyslog mailing list
>> https://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>> DON'T LIKE THAT.
>>
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
>
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
