[rsyslog-notify] Forum Thread: Queue file not being created - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Tue Aug 16 12:09:28 CEST 2016
User: monimi
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26875#p26875
Message:
----------
Hi, I am trying to bufferize the messages from specific process that are
being handled by rsyslog, so i created a .conf file on the /etc/rsyslogd
directory and wrote this configuration:
[code:211sewum]$MainMsgQueueType LinkedList
$MainMsgQueueSize 10000
$MainMsgQueueDiscardMark 8000
$MainMsgQueueDiscardSeverity 6
$MainMsgQueueSaveOnShutdown on
$MainMsgQueueTimeoutEnqueue 1
$ActionQueueType LinkedList
$ActionQueueFileName testMichelleQueue
$ActionQueueSize 10000
$ActionQueueDiscardMark 8000
$ActionQueueDiscardSeverity 8
$ActionQueueSaveOnShutdown on
$ActionQueueTimeoutEnqueue 1
$ActionResumeRetryCount -1
$RepeatedMsgReduction off[/code:211sewum]
Also, on the rsyslog.conf file, the work directory is configured to
/var/spool/rsyslog, but any queue file is being created on the
/var/spool/rsyslog directory. This is part of the log i am getting:
[code:211sewum]5359.884959781:40af4460: main Q: queue
nearly full (9968 entries), but could not drop msg (iRet: 0, severity
5)
5359.885444073:40af4460: main Q: queue nearly full (9968
entries), but could not drop msg (iRet: 0, severity 5)
5359.885938614:40af4460: main Q: queue nearly full (9968
entries), but could not drop msg (iRet: 0, severity 5)
5359.886483781:413ff460: main Q: enqueueMsg: wait
solved queue full condition, enqueing
5359.886571281:413ff460: main Q: EnqueueMsg advised worker
start
5359.886930656:413ff460: main Q: queue nearly full (9969
entries), but could not drop msg (iRet: 0, severity 5)
5359.886987364:413ff460: main Q: EnqueueMsg advised worker
start
5359.887231656:413ff460: main Q: queue nearly full (9970
entries), but could not drop msg (iRet: 0, severity 5)
5359.887284989:413ff460: main Q: EnqueueMsg advised worker
start
5359.887528614:413ff460: main Q: queue nearly full (9971
entries), but could not drop msg (iRet: 0, severity 5)
5359.887582073:413ff460: main Q: EnqueueMsg advised worker
start
5359.887791531:413ff460: main Q: queue nearly full (9972
entries), but could not drop msg (iRet: 0, severity 5)[/code:211sewum]
I dont know if i am missing something else, any ideas?
Thanks in advanced.
More information about the rsyslog-notify
mailing list