[rsyslog-notify] Forum Thread: Re: Spooling Logs to Disk & Defining Threads - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25460#p25460

Message: 
----------
queue parameters can be set on an action, a ruleset, or the main queue

look at <!-- m --><a class="postlink"
href="http://www.rsyslog.com/doc/master/rainerscript/queue_parameters.html">http://www.rsyslog.com/doc/master/raine
... eters.html</a><!-- m --> for details

A word of caution on threads, too many threads can hurt performance, they
should only e adjusted after other tuning items have been attempted.

if you are using a current version of rsyslog, you should change your if
statements to

if condition then {
  action()
  stop
}

you also don't need to use *.*, just list the action

If you use rulesets, use the new syntax 

ruleset(paramters) {
  things
}


the way you have things written, the queue has no effect on anything (you
can't combine the legacy queue config and the new action() syntax, one or
the other)

David Lang