Hi We are using rsyslog-8.2102 and we are trying to delay forwarding of syslogs messages to a remote host.
ruleset ( name="ForwardToServer1" queue.size="1000" queue.dequeuebatchsize="1" queue.type="LinkedList" queue.dequeueslowdown="100000" ) { if $syslogfacility-text != 'authpriv' and $syslogfacility-text == 'local4' then action( type="omfwd" Target="172.24.68.195" Port="514" Protocol="udp" template="OUTGOING_MESSAGE_FORMAT2" ) } call ForwardToServer1 Is there anything wrong with the above ruleset which is trying to add a delay of 100ms to dequeue a message? I am stracing rsyslogd and I see the message going at the next millisecond it was logged by a program. I'm generating one syslog every few seconds and it goes out in the same millisecond it was received by rsyslogd. Thank you Prasad _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.