[rsyslog-notify] Forum Thread: Adding file queueing to an existing set of actions - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Mon Mar 24 20:50:29 CET 2014
User: brucep
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24432#p24432
Message:
----------
I'm using rsyslog 7.6. I have an existing rule set up so that an
application that logs to local6 forwards everything to a remote syslog
server. This is currently working fine:
[code:1p6ntbc5]
local6.* {
action(type="mmanon" ipv4.bits="16" mode="simple"
replacementChar="x")
action(type="omfwd" Protocol="tcp" Target="mytarget.com"
Port="6514" StreamDriverMode="1" StreamDriver="gtls"
StreamDriverAuthMode="x509/name"
StreamDriverPermittedPeers="*.mytarget.com" template="myTemplate")
}
[/code:1p6ntbc5]
I'm trying to set up an on-disk queue to make this more robust but I can't
tell if this is working properly or not. From reading the docs it looks
like what I want is something like this:
[code:1p6ntbc5]
$WorkDirectory /var/tmp
...
local6.* {
action(type="mmanon" ipv4.bits="16" mode="simple"
replacementChar="x")
$ActionQueueType LinkedList
$ActionQueueFileName rq
$ActionQueueMaxFileSize 1mb
$ActionQueueSaveOnShutdown on
action(type="omfwd" Protocol="tcp" Target="mytarget.com"
Port="6514" StreamDriverMode="1" StreamDriver="gtls"
StreamDriverAuthMode="x509/name"
StreamDriverPermittedPeers="*.mytarget.com" template="myTemplate")
}
[/code:1p6ntbc5]
When I restart rsyslog it starts successfully, but I never see any files
being created in /var/tmp. I've tried setting the omfwd action to forward
to a target that's not currently listening on port 6514 and used logger to
send some local6 messages, but I never see a queue file being created.
What am I doing wrong?
More information about the rsyslog-notify
mailing list