[rsyslog-notify] Forum Thread: Re: logs reception with delay - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25293#p25293

Message: 
----------
without more info all we can do is guess.

It sounds like the receiving box can't keep up with the rate of logs, but
without knowing what it's doing with the logs there's no way of suggesting
what the problem could be. It could be a slow output, or it could be DNS,
or it could be some other bottleneck.

The first thing you should do is to upgrade the receiving box to a
currently supported version of rsyslog, v8.8 has a huge number of
improvements since v5.

Once you are on a current version, configure the impstats module on both
the sender and receiver, that will give you a lot of information about
what's going on. If the upgrade doesn't solve your problem just from the
improvements over the years, you will need to post the configuration of the
receiving box (at minimum)