[rsyslog-notify] Forum Thread: Re: Time lag issue of forwarding vs available I/O at 6600 mp - (Mode 'edit_last_post')

[noreply at adiscon.com]

User: rajatg 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26908#p26908

Message: 
----------
Hi David,

I am sorry to reply on this thread so late. I have decided to use imfile
module on clients aand following is the config on clients.

[code:2xfptgh8]
$ModLoad imfile
 $InputFileName /var/log/ceph/radosgw.log
 $InputFileTag rgwlog
 $InputFileStateFile rgwlog
 $InputFileFacility local7
 $InputRunFileMonitor
 $InputFilePollInterval 1
#
#
# # Use default format
 $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
#
#
#
#
#
#
#
# # Log to remote syslog server using tcp
if $programname == 'rgwlog' or $programname == 'radosgw' or $msg contains
'radosgw' then @@10.140.222.240:514;
[/code:2xfptgh8]

The central server config is the same. Right now, I am facing issue when
the amount of log to be transferred is greater than 3 Mbps. The issue is
that there seems to be lag in sending the log messages to the central
server (i.e. writing in /var/log/syslog on client has the same lag). And,
this lag increases if this rate is maintained for a longer time.
Central server is running rsyslog version 8.19.0 and the client is running
8.20.0 version. Is there any specific config which I can set on these
latest rsyslog installations so that this lag can be removed? 

Thanks,
Rajat

Thanks,
Rajat