[rsyslog-notify] Forum Thread: Problem to resume disk queue - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Tue Nov 24 14:28:45 CET 2015


User: t0x 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26188#p26188

Message: 
----------
Hello all,

I have a problem with disk queue. In fact I have an incident and my rsyslog
can't join the remote server during 2 days.
No problem because Action disk queue is activate so all the logs are in a
directory with the queue file name.
I have around 1656 files in the queue directory ( around 15GB of datas): 
find . -iname "*queue*" -type f | wc -l
1656

this is my configuration: 
[code:jhs0y7nr]
ruleset(name="client_517"
        queue.filename="client__imtcp517_ruleset_queue"
        queue.saveonshutdown="on"
        queue.type="LinkedList") {
*.* action(name="client_imtcp517_ruleset" type="omfwd"
action.resumeretrycount="-1" Target="192.168.1.1"
Port="6666" Protocol="tcp" ZipLevel="9"
compression.mode="stream:always" template="template_rawmsg")
}
[/code:jhs0y7nr]
this the the main qi files.
[code:jhs0y7nr]
<OPB:1:qqueue:1:
+iQueueSize:2:6:374050:
+tVars.disk.sizeOnDisk:2:9:316415065:
>End
.
<Obj:1:strm:1:
+iCurrFNum:2:2:19:
+pszFName:1:36:client__imtcp517_ruleset_queue:
+iMaxFiles:2:8:10000000:
+bDeleteOnClose:2:1:0:
+sType:2:1:1:
+tOperationsMode:2:1:2:
+tOpenMode:2:3:384:
+iCurrOffs:2:8:14418599:
+inode:2:1:0:
+bPrevWasNL:2:1:0:
>End
.
<Obj:1:strm:1:
+iCurrFNum:2:1:1:
+pszFName:1:36:client__imtcp517_ruleset_queue:
+iMaxFiles:2:8:10000000:
+bDeleteOnClose:2:1:1:
+sType:2:1:1:
+tOperationsMode:2:1:1:
+tOpenMode:2:3:384:
+iCurrOffs:2:4:7088:
+inode:2:1:0:
+bPrevWasNL:2:1:0:
>End
.
[/code:jhs0y7nr]

The problem is that rsyslog does not resume the queue. I don't know how to
send queues files now.


Many thanks for your help
Best regards
t0x


More information about the rsyslog-notify mailing list