[rsyslog-notify] Forum Thread: Re: rsyslog: does rsyslog support in-oder log messages deliv - (Mode 'reply')

[noreply at adiscon.com]

User: IgorS 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=27212#p27212

Message: 
----------
Thanks for clarification.

What i was trying to understand is the following: i have 2
machines(CentOS); let's call them machine A and machine B. rsyslog is
started on machine B
rsyslog is staying idle most of the time, this is development environment.

[Scenario 1] : If i execute on machine A: cat <file_of_1GB> | nc <machine
B> 514 ----messages arrives, no message is lost but order is mixed 
[Scenario 2] : If i execute on machine B: cat <file_of_1GB> | nc <localhost
B> 514 ----messages arrives, no message is lost, order is OK

<file_of_1GB> has ~2 million lines.

This behavior is reproducible.  I got same results when i ran this test
several times.

Upon your clarification, i guess all messages pass through main queue,
additional workers will be spawned and order can get mixed up. But why
order is OK (at least in several tests i did)  in [Scenario 2] ? I think
rate of enqueue-ing messages in this case is faster comparing to [Scenario
1] so i would expect more workers in this case....

If you think its worth it i can try to run it in debug mode and check any
interesting messages in the log.


Thanks, Igor.