[rsyslog] rsyslog 5.3.6 (v5-beta) released
Rainer Gerhards
rgerhards at hq.adiscon.com
Wed Jan 20 16:19:46 CET 2010
David,
thanks for the feedback - and a quick note.
With the new engine, you can do ruleset inclusion (via omruleset[1]). That is
probably *the* method to handle files that are written to by multiple
actions. Of course, no need to change if all works in default config. But you
can gain some extra performance by using buffered mode (for busy files) and
to use that, you need to have only one action write to each file. This is
where ruleset inclusion enters the game.
Rainer
[1] http://www.rsyslog.com/doc-omruleset.html
> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of david at lang.hm
> Sent: Wednesday, January 20, 2010 12:26 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] rsyslog 5.3.6 (v5-beta) released
>
> I've now had v5.3.6 running on my production environemnets since friday
> with no problems
>
> one side effect of the cleanups is that previously when I had multiple
> filters write to one file I was getting lots of corrupt lines, but the
> change to have omfile write each transaction rather than just as the
> buffer filled up seems to have eliminated this (it went from 10's of
> thousands of corrupted lines/day to none over the weekend and monday,
> tonight's report will be the acid test to see if it's fully cleaned up)
>
> I realize there is still a window for corruption (if two output threads
> running at the same time both decide they need to write at the same
> time),
> but it seems that in practice it's effectively gone.
>
> David Lang
>
> On Fri, 15 Jan 2010, david at lang.hm wrote:
>
> > On Fri, 15 Jan 2010, Michael Biebl wrote:
> >
> >> BTW, I'm actually surprised that you don't encounter those problems
> >> yourself.
> >
> > I'm running 5.3.5 still, I haven't had time to build a new version
> (hopefully
> > tomorrow)
> >
> > David Lang
> >
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
More information about the rsyslog
mailing list