[rsyslog-notify] Forum Thread: Re: filter invalid syslogtag - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26737#p26737

Message: 
----------
either that system is generating corrupt messages, or rsyslog is managing
to corrupt them.

As I said earlier, we did see some issues with corruption of messages when
using json-c, it was investigating those that showed how big a problem
there was and lead to forking it to libfastjson.

since you are running old versions, you are using  the json-c library that
is not thread-safe. so if you use action queues, or anything else in your
config that causes rsyslog to use multiple threads, it could get corrupted.

It's a low probability (which is how we missed it for years), but some
configs seem to trigger it reliably.