[rsyslog-notify] Forum Thread: Re: Rsyslog Message duplicates - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Mon Mar 10 23:33:46 CET 2014


User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24335#p24335

Message: 
----------
Ok, i don't know what the rules are on your central server, but since you
set the priority of access logs to 'info', is there a chance that you don't
have anything that is writing such low priority logs on the server?

If one of the log types are getting there, it's pretty likely that the
other type is as well. we need to hunt and find out what's happening to the
data.

given that both inputs are reading files, rsyslog will probably read a lot
of one file before it reads any of the other file, can you check that the
data isn't arriving at all?

Also, on the sending side, can you write this to files to make sure that
it's seeing both types properly?


More information about the rsyslog-notify mailing list