[rsyslog-notify] Forum Thread: Queue file not being created - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Tue Aug 16 12:09:28 CEST 2016


User: monimi 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26875#p26875

Message: 
----------
Hi, I am trying to bufferize the messages from specific process that are
being handled by rsyslog, so i created a .conf file on the /etc/rsyslogd
directory and wrote this configuration:

[code:211sewum]$MainMsgQueueType LinkedList
$MainMsgQueueSize 10000
$MainMsgQueueDiscardMark 8000
$MainMsgQueueDiscardSeverity 6
$MainMsgQueueSaveOnShutdown on
$MainMsgQueueTimeoutEnqueue 1
$ActionQueueType LinkedList 
$ActionQueueFileName testMichelleQueue 
$ActionQueueSize 10000
$ActionQueueDiscardMark 8000
$ActionQueueDiscardSeverity 8
$ActionQueueSaveOnShutdown on
$ActionQueueTimeoutEnqueue 1
$ActionResumeRetryCount -1     
$RepeatedMsgReduction off[/code:211sewum]

Also, on the rsyslog.conf file, the work directory is configured to
/var/spool/rsyslog, but any queue file is being created on the
/var/spool/rsyslog directory. This is part of the log i am getting:

[code:211sewum]5359.884959781:40af4460: main Q: queue
nearly full (9968 entries), but could not drop msg (iRet: 0, severity
5)
5359.885444073:40af4460: main Q: queue nearly full (9968
entries), but could not drop msg (iRet: 0, severity 5)
5359.885938614:40af4460: main Q: queue nearly full (9968
entries), but could not drop msg (iRet: 0, severity 5)
5359.886483781:413ff460: main Q: enqueueMsg: wait
solved queue full condition, enqueing
5359.886571281:413ff460: main Q: EnqueueMsg advised worker
start
5359.886930656:413ff460: main Q: queue nearly full (9969
entries), but could not drop msg (iRet: 0, severity 5)
5359.886987364:413ff460: main Q: EnqueueMsg advised worker
start
5359.887231656:413ff460: main Q: queue nearly full (9970
entries), but could not drop msg (iRet: 0, severity 5)
5359.887284989:413ff460: main Q: EnqueueMsg advised worker
start
5359.887528614:413ff460: main Q: queue nearly full (9971
entries), but could not drop msg (iRet: 0, severity 5)
5359.887582073:413ff460: main Q: EnqueueMsg advised worker
start
5359.887791531:413ff460: main Q: queue nearly full (9972
entries), but could not drop msg (iRet: 0, severity 5)[/code:211sewum]

I dont know if i am missing something else, any ideas?

Thanks in advanced.


More information about the rsyslog-notify mailing list