Nikolaus at rath
Jul 20, 2012, 7:09 AM
Queued remote logging slowing down local logging
I set up rsyslog to send log messages to a remote server and show them
locally on tty8:
This works just fine. However, the "spitzer" host is only available over
VPN, so I am loosing all messages that are logged before the VPN is up.
I wanted to fix this by using a queue:
Now I am getting all the messages on spitzer, but also the boot process
slows down to a crawl. Looking at tty8, I can see that while the first
kernel log messages just rush by, at some point the messages appear very
slowly, at maybe 1 message per second. I suspect that this is what slows
down the booting.
Also, according to lsof, the rsyslog process does not seem to open any
file in /var/cache/rsyslog, even though it has the right permissions.
When starting rsyslog, the only messages that I get are:
Jul 20 10:05:46 athena rsyslogd: [origin software="rsyslogd" swVersion="4.2.0" x-pid="2517" x-info="http://www.rsyslog.com"] (re)start
Jul 20 10:05:46 athena rsyslogd: rsyslogd's groupid changed to 103
Jul 20 10:05:46 athena rsyslogd: rsyslogd's userid changed to 101
What am I doing wrong?
»Time flies like an arrow, fruit flies like a Banana.«
PGP fingerprint: 5B93 61F8 4EA2 E279 ABF6 02CF A9AD B7F8 AE4E 425C
rsyslog mailing list
What's up with rsyslog? Follow https://twitter.com/rgerhards