I am using rsyslog v5.8.11
. I found this version number from what rsyslog
logs on restart.
I am trying to apply rate-limiting in rsyslog
but it is of no use. I am still losing messages. In the configuration file I put these options to implement rate-limiting
$SystemLogRateLimitInterval 5
$SystemLogRateLimitBurst 10000
This is of no use as I am still losing messages at the same rate. I even tried to put
$SystemLogRateLimitInterval 0
This should have stopped the rate-limiting feature of rsyslog
but instead nothing happened. I am still losing message. These logs are critical to me.
Is there any way possible to stop losing messages in rsyslog
.
UPDATE
On restart i also found this in rsyslog logs.
rsyslogd: invalid selector line (port), probably not doing what was intended
Is losing logs somehow related to this error.
There are the logs showing that i am losing logs due to rate-limiting.
rsyslogd-2177: imuxsock begins to drop messages from pid 25810 due to rate-limiting
rsyslogd-2177: imuxsock lost 103 messages from pid 25810 due to rate-limiting
Such type of logs are coming no matter what setting is applied by me. If logs are lost due to UDP will rsyslog log in this manner too?
rsyslog
that is dropping them. You would need to configure the reliable delivery component ofrsyslog
and runrsyslog
on all your message generators.rsyslog
?