[rsyslog-notify] Forum Thread: Re: ompipe(action failed) or omfile( queues are filling) - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26550#p26550

Message: 
----------
the problem is probably that the pipe is full, debug mode may show you some
info. pipes default to be rather small, so a few messages could easily fill
them if the programs reading the pipe can't keep up.

it's not a good idea to have queues feed queues with no real actions. so
don't put a queue on both the ruleset and the only action in the ruleset.
(the process moving things between queues can't operate reasonably and the
queues end up locked far too much of the time)

rsyslog -N2 does a syntax check of the config file and one layer of
includes (N3 does two layers of includes, etc)


omfile writing to a file seldom has problems keeping up unless your
filesystem is slow (say, NFS) or if a pipe is involved and you aren't
reading the pipe fast enough. There are things you can do to configure
linux to allocate larger buffers to the pipes.