[rsyslog-notify] Forum Thread: Adding file queueing to an existing set of actions - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Mon Mar 24 20:50:29 CET 2014


User: brucep 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24432#p24432

Message: 
----------
I'm using rsyslog 7.6.  I have an existing rule set up so that an
application that logs to local6 forwards everything to a remote syslog
server.  This is currently working fine:

[code:1p6ntbc5]
local6.* {
    action(type="mmanon" ipv4.bits="16" mode="simple"
replacementChar="x")
    action(type="omfwd" Protocol="tcp" Target="mytarget.com"
Port="6514" StreamDriverMode="1" StreamDriver="gtls"
StreamDriverAuthMode="x509/name"
StreamDriverPermittedPeers="*.mytarget.com" template="myTemplate")
}
[/code:1p6ntbc5]

I'm trying to set up an on-disk queue to make this more robust but I can't
tell if this is working properly or not.  From reading the docs it looks
like what I want is something like this:

[code:1p6ntbc5]
$WorkDirectory /var/tmp
...
local6.* {
    action(type="mmanon" ipv4.bits="16" mode="simple"
replacementChar="x")

    $ActionQueueType LinkedList
    $ActionQueueFileName rq
    $ActionQueueMaxFileSize 1mb
    $ActionQueueSaveOnShutdown on

    action(type="omfwd" Protocol="tcp" Target="mytarget.com"
Port="6514" StreamDriverMode="1" StreamDriver="gtls"
StreamDriverAuthMode="x509/name"
StreamDriverPermittedPeers="*.mytarget.com" template="myTemplate")
}
[/code:1p6ntbc5]

When I restart rsyslog it starts successfully, but I never see any files
being created in /var/tmp.  I've tried setting the omfwd action to forward
to a target that's not currently listening on port 6514 and used logger to
send some local6 messages, but I never see a queue file being created. 
What am I doing wrong?


More information about the rsyslog-notify mailing list