I'm forwarding the logs with rsyslog (tcp) from 10 servers to a log collector. RHEL 6.9.

If the network between log collector and the servers is down, I'm hitting login issues. Known issue: https://access.redhat.com/solutions/1250933

I'm checking to see if it is possible to tell rsyslog service to stop forwarding logs if the network is down and resume once the connection is back- using forwarding rules or any other way.

A rule similar to:

> $ActionQueueType LinkedList # use asynchronous processing
> $ActionQueueFileName srvrfwd # set file name, also enables disk mode
> $ActionResumeRetryCount -1 # infinite retries on insert failure
> $ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts
> down :syslogtag, isequal, "app2″ :omrelp:

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.