[rsyslog-notify] Forum Thread: Re: actions suspend/resume writing to omfile? - (Mode 'reply')

[noreply at adiscon.com]

User: leonidas 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=27179#p27179

Message: 
----------
Thank you, David.  I should add that in this case, that the number of
connections from several of the endpoints just kept incrementing (no
indication why), and eventually the max # of sessions on this rsyslog
server was exceeded.  The "too many sessions--dropping requests" was
received, our omfwd actions/connections dropped somewhere as this
degradation grew, etc.

Is there anything that would cause multiple connections from one endpoint? 
Note that these were all "ESTABLISHED" connections;  no FIN_WAIT,
CLOSE_WAIT, or anything like that.    I'm wondering why an endpoint would
try to establish multiple sessions, and/or why the rsyslog server doesn't
drop them?

Thanks again for your timely reply.  It's much appreciated!