[rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-01 Thread helices via rsyslog
# date; /bin/yum list rsyslog rsyslog-mysql ;date Thu Dec 1 09:47:18 CST 2022 Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: download.cf.centos.org * epel: mirror.genesisadaptive.com * extras: download.cf.centos.org * remi-php56: mirror.pit.teraswitch.com * r

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-01 Thread helices via rsyslog
h the template > RSYSLOG_DebugFormat to a > file and find the log entry that is failing to insert. > > my guess is that the quotes in the message are confusing mysql > > note that rate limiting is throwing away messages because you are trying > to > process them too fast. >

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-01 Thread helices via rsyslog
that action() format) > > the debug format is large, but you really need to see the message that's > failing > to figure out why it's failing. The MySQL logs may give you better info on > that. > > David Lang > > On Thu, 1 Dec 2022, helices wrote: > > &g

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-06 Thread helices via rsyslog
queues, number processed, etc. > >> > >> imjournal defaults to some fairly aggressive rate limiting, I find that > I > >> always > >> need to drastically increase the limits. > >> > >> writing logs using the RSYSLOG_DebugFormat is adding

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-09 Thread helices via rsyslog
Lang wrote: >> > >> >> it would be useful to convert to the action() syntax as it makes it >> >> clearer >> >> what's happening. >> >> >> >> Why are you pausing between writing logs? (this could be why you are >> >> dropping

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-12 Thread helices via rsyslog
v8-stable/configuration/modules/imjournal.html > > Rainer > > El mar, 6 dic 2022 a las 15:16, helices via rsyslog > () escribió: > > > > David, > > > > What am I doing wrong? > > > > module(load="imjournal" Ratelimit.Interval=

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-12 Thread helices via rsyslog
:34 PM David Lang wrote: > did you do a full restart after making the change? can you show the full > config? > > the messages you are showing are saying taht the config line you show > isn't > being used. > > David Lang > > On Mon, 12 Dec 2022, helices via r

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-12 Thread helices via rsyslog
asynchronous processing > > $ActionResumeRetryCount -1# Infinite retries on insert failure > > *.* @@10.199.1.160 > > Mon Dec 12 13:56:12 CST 2022 > > > > On Mon, Dec 12, 2022 at 1:34 PM David Lang wrote: > > > >> did y

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-13 Thread helices via rsyslog
finite retries on insert failure > *.* @@10.199.1.160 > Mon Dec 12 13:56:12 CST 2022 > > On Mon, Dec 12, 2022 at 1:34 PM David Lang wrote: > >> did you do a full restart after making the change? can you show the full >> config? >> >&

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-13 Thread helices via rsyslog
onous processing > >> $ActionResumeRetryCount -1 # Infinite retries on insert failure > >> authpriv.* > :ommysql:10.199.5.177,sftplogDB,hermesvsftplog,_ > >> $ActionName Admin > >> $ActionQueueFileName ZenossQueue # Set file name, also enable

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-13 Thread helices via rsyslog
>> >> local7.*/var/log/boot.log > >> >> mail.* /var/log/maillog > >> >> uucp,news.crit /var/log/spooler > >> >> $ActionName Ftp >

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-13 Thread helices via rsyslog
quot;) > >> >> >> module(load="imklog") > >> >> >> module(load="immark") > >> >> >> module(load="impstats" interval="600" severity="7") > >> >> >> syslog.=debug /var/log/rsysl

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-14 Thread helices via rsyslog
ernal_messages]: 1768 messages lost due to rate-limiting (500 > allowed within 5 seconds) > >> >> >> > > >> >> >> > > >> >> >> > Please, advise. Thank you. > >> >> >> > > >> >> >> >

Re: [rsyslog] Rsyslogd/ommysql.so: Not writing to DB intermittently

2022-12-14 Thread helices via rsyslog
gt; allowed within 5 seconds) >> >> >> >> > 2022-12-13T02:23:50.001278-06:00 hermes rsyslogd[2539]: >> rsyslogd[internal_messages]: 1779 messages lost due to rate-limiting (500 >> allowed within 5 seconds) >> >> >> >> > 2022-12-

[rsyslog] Rate-limit: Cannot configure higher limit

2022-12-14 Thread helices via rsyslog
REF: Rsyslogd/ommysql.so: Not writing to DB intermittently Rainer asked us to start a new post for the rate-limit issue. A few of many hundreds of rate-limit errors and lost messages: 2022-12-13T02:23:44.003241-06:00 hermes rsyslogd[2539]: rsyslogd[internal_messages]: 1792 messages lost due to

Re: [rsyslog] Rate-limit: Cannot configure higher limit

2022-12-15 Thread helices via rsyslog
It happened again this afternoon: 2022-12-15T14:01:13.006027-06:00 hermes rsyslogd[10975]: rsyslogd[internal_messages]: 793 messages lost due to rate-limiting (500 allowed within 5 seconds) 2022-12-15T14:01:19.005580-06:00 hermes rsyslogd[10975]: rsyslogd[internal_messages]: 1272 messages lost due

Re: [rsyslog] Rate-limit: Cannot configure higher limit

2022-12-15 Thread helices via rsyslog
I've pared down the debug file to 18MB and bzip2 - too large for pastebin. How an I get it to you? On Thu, Dec 15, 2022 at 3:38 PM helices wrote: > It happened again this afternoon: > > 2022-12-15T14:01:13.006027-06:00 hermes rsyslogd[10975]: > rsyslogd[internal_messages]: 793 messages lost due

Re: [rsyslog] Rate-limit: Cannot configure higher limit

2022-12-15 Thread helices via rsyslog
Yes - see pastebin link in 1st message. On Thu, Dec 15, 2022, 15:43 David Lang wrote: > did you post the full debug log at startup? > > since you are attempting to set the limit higher, but this is showing the > default limit, there has to be something wrong with the config or the > config >