[rsyslog-notify] Forum Thread: Re: rsyslog: does rsyslog support in-oder log messages deliv - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26244#p26244

Message: 
----------
no, between the problem of queues, multiple threads working at once, logs
being relayed through servers that may go down and then come back later
delivering messages, the fact that the network does not guarantee in-order
delivery of packets, and a few other cases, rsyslog does not guarantee that
logs will be delivered in the exact order they were received. back in the
2.x days, rsyslog went to a lot of effort to try and deliver all the logs
in-order, but then we realized that it just wasn't possible, so we relaxed
the restrictions and gained a LOT of speed.

In the case of logs sent to a disk queue file, rsyslog used to deliver the
old logs before new ones, but we found that this was enough slower than
delivering new logs first (along with race conditions in deciding if new
logs needed to be sent to the disk queue or not) that this was changed to
send new logs first.