[rsyslog-notify] Forum Thread: Re: Issue with omfwd rebindinterval usage - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26329#p26329

Message: 
----------
you can't comment out a parameter in the middle of a action() statement the
way you are trying to do. When you add the # you are probably causing a
syntax error (if you do rsyslog -N1 it should tell you)

this is the equivalent of doing 

[code:rrtziljg] action(type="omfwd" name="fwd.graylog2"
Target="172.16.57.4" Port="10515" Protocol="tcp" # 
RebindInterval="30000"  queue.type="LinkedList"
queue.filename="queue.graylog2" queue.saveonshutdown="on"
queue.size="20000" queue.highwatermark="19000"
queue.lowwatermark="2000" queue.discardmark="19750"
queue.discardseverity="7" )
[/code:rrtziljg]

rsyslog doesn't care about newlines in the middle of an action, they are
just whitespace.

once you have a syntax error in the config, I've seen rsyslog do some
rather strange things as it trys to guess what to do.

a rebindinterval of 30000 is rather large, you are telling it to delvier
30000 messages through the connection and then make a new connection, try
setting it to something much lower. If you are in the same datacenter (i.e.
low ping time between sending and receiving systems, you will already be
gaining most of the efficiency value when you get to 100 or so.