[rsyslog] Rsyslog spool files not going away

David Bristow djbristow at optonline.net
Wed Nov 9 15:17:39 CET 2011


The version of rsyslog is 4.2.0-2ubuntu8.1 from Ubuntu Server 10.04 LTS
and I don't believe we are using TLS.

ActionQueueMaxDiskSpace looks promising.

On Tue, 2011-11-08 at 10:58 -0600, Lu, Victor wrote:
> David,
> 
> You did not mention about which version of rsyslog collector you are using and whether tls is used for communication and on what OS platforms. During my testing on RHEL 5 and 6, I found the disk files are not going away only with TLS on a lower version rsyslog collector. However the rest of them are working fine.
> 
> Regarding the amount of files in the queue directory, The following two tokens control the queue file size and number of files to be created. When the maximum queue disk space is reached, the new arrived messages will be discarded, so the number of files will not grow.
> 
> ActionQueueMaxFileSize
> ActionQueueMaxDiskSpace
> 
> Hope it helps. 
> 
> Victor
> 
> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Rainer Gerhards
> Sent: Tuesday, November 08, 2011 2:43 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] Rsyslog spool files not going away
> 
> The current file for each disk assisted queue will remain, once the DA thread
> has been initiated. Multiple files *for the same queue* should not remain.
> 
> Hth rainer
> 
> > -----Original Message-----
> > From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> > bounces at lists.adiscon.com] On Behalf Of David Bristow
> > Sent: Monday, November 07, 2011 7:11 PM
> > To: rsyslog at lists.adiscon.com
> > Subject: [rsyslog] Rsyslog spool files not going away
> > 
> > When we have a connectivity problem and clients start to spool to the:
> > 
> > $WorkDirectory /var/spool/rsyslog
> > 
> > the total amount of files in that directory can grow pretty big.  When
> > connectivity resumes, however, it does not seem like those spool files
> > go away.
> > 
> > Is this expected?
> > 
> > --
> > David Bristow <djbristow at optonline.net>
> > 
> > 
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com

-- 
David Bristow <djbristow at optonline.net>



More information about the rsyslog mailing list