[rsyslog-notify] Forum Thread: Re: messages are missing from the log - (Mode 'reply')

[noreply at adiscon.com]

User: awolfson 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24493#p24493

Message: 
----------
[quote:1xouk60v]well, one thing to do would be to bypass systemd, create an
additional socket (say /dev/reallog :-) and try logging to that. If you no
longer have problems, then it's in systemd.
[/quote:1xouk60v]
I don't have access to the device now so to be sure that I have at least
correct configuration I tried in the virtual F17 machine running on Lenovo
T41 Ubuntu 13.10 Laptop. It has 8.2.0 rsyslog. 
Got interesting performance results:
When using additional socket (I used <!-- m --><a class="postlink"
href="http://www.rsyslog.com/doc/imuxsock.html">http://www.rsyslog.com/doc/imuxsock.html</a><!--
m --> to find out how to do it)

rsyslog.conf
[code:1xouk60v]
module(load="imuxsock" # needs to be done just once
SysSock.RateLimit.Interval="0") # turn off rate limiting
SysSock.Name=/dev/reallog
input(type="imuxsock" Socket="/dev/reallog" CreatePath="on")
[/code:1xouk60v]
Got:
[code:1xouk60v]
[awolfson at localhost testrsyslog]$ time sudo
./test-rsyslog.sh 10000 1
Restarting rsyslog (via systemctl):                        [  OK 
]
Messages=10000 delay(usec)=1
Sent 10000 messages
 10000  90000 588890 /var/log/test-rsyslog.log

real	0m1.503s
user	0m0.014s
sys	0m0.358s
[/code:1xouk60v]
When I use systemd journal:
rsyslog.conf
[code:1xouk60v]
$ModLoad imjournal # provides support for local system logging
(e.g. via logger command)
$mjournlRateLimitInterval 0 
[/code:1xouk60v]
Got:
[code:1xouk60v]
[awolfson at localhost testrsyslog]$ time sudo
./test-rsyslog.sh 10000 1
Restarting rsyslog (via systemctl):                        [  OK 
]
Messages=10000 delay(usec)=1
Sent 10000 messages
 10000  90000 588890 /var/log/test-rsyslog.log

real	0m2.504s
user	0m0.007s
sys	0m0.084s
[/code:1xouk60v]

So looks like systemd journal really gives a big performance hit
Hope that one of the above solution will work on the real device. I will
find it on Monday.

David, thanks again for your support