Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: RSyslog: users

Turning on compression only for some logfiles?

 

 

RSyslog users RSS feed   Index | Next | Previous | View Threaded


chas at aggregateknowledge

Aug 10, 2012, 2:03 PM

Post #1 of 4 (329 views)
Permalink
Turning on compression only for some logfiles?

I'm working on some new rsyslog configs for our log archiving hosts, and
one of the things I'd like to do in the new configs is have rsyslog
write to the aggregate log archives with gzip compression, but I don't
want to have its system logs being written to /var/log in a compressed
format (just so they are easier to read if I just want to debug that
particular host). Can I specify $OMFileZipLevel for a single ruleset
somehow, or can I only specify that globally?

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards


vladg at cmu

Aug 10, 2012, 4:38 PM

Post #2 of 4 (304 views)
Permalink
Re: Turning on compression only for some logfiles? [In reply to]

From the documentation at <http://www.rsyslog.com/doc/omfile.html>:

Action specific Configuration Directives:

- ZipLevel 0..9 [default 0]
if greater 0, turns on gzip compression of the output file. The higher the number, the better the
compression, but also the more CPU is required for zipping.

Sample:

*.* action(type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File= "/var/log/messages")

So, to change compression for that particular action, just add a ZipLevel=$whatever to the action line.

--Vlad

On Aug 10, 2012, at 5:03 PM, Chastity Blackwell <chas [at] aggregateknowledge>
wrote:

> I'm working on some new rsyslog configs for our log archiving hosts, and
> one of the things I'd like to do in the new configs is have rsyslog
> write to the aggregate log archives with gzip compression, but I don't
> want to have its system logs being written to /var/log in a compressed
> format (just so they are easier to read if I just want to debug that
> particular host). Can I specify $OMFileZipLevel for a single ruleset
> somehow, or can I only specify that globally?
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards


chas at aggregateknowledge

Aug 10, 2012, 5:11 PM

Post #3 of 4 (302 views)
Permalink
Re: Turning on compression only for some logfiles? [In reply to]

We're using 5.8 still -- that's the 6.x syntax, correct? Is there a way to do it in 5.x?
________________________________________
From: rsyslog-bounces [at] lists [rsyslog-bounces [at] lists] On Behalf Of Vlad Grigorescu [vladg [at] cmu]
Sent: Friday, August 10, 2012 4:38 PM
To: rsyslog-users
Subject: Re: [rsyslog] Turning on compression only for some logfiles?

From the documentation at <http://www.rsyslog.com/doc/omfile.html>:

Action specific Configuration Directives:

- ZipLevel 0..9 [default 0]
if greater 0, turns on gzip compression of the output file. The higher the number, the better the
compression, but also the more CPU is required for zipping.

Sample:

*.* action(type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File= "/var/log/messages")

So, to change compression for that particular action, just add a ZipLevel=$whatever to the action line.

--Vlad

On Aug 10, 2012, at 5:03 PM, Chastity Blackwell <chas [at] aggregateknowledge>
wrote:

> I'm working on some new rsyslog configs for our log archiving hosts, and
> one of the things I'd like to do in the new configs is have rsyslog
> write to the aggregate log archives with gzip compression, but I don't
> want to have its system logs being written to /var/log in a compressed
> format (just so they are easier to read if I just want to debug that
> particular host). Can I specify $OMFileZipLevel for a single ruleset
> somehow, or can I only specify that globally?
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards


david at lang

Aug 10, 2012, 5:31 PM

Post #4 of 4 (303 views)
Permalink
Re: Turning on compression only for some logfiles? [In reply to]

It should be a value that you can set and it remains at that value until
you set it to something else.

David Lang

On Fri, 10 Aug 2012, Chastity Blackwell wrote:

> We're using 5.8 still -- that's the 6.x syntax, correct? Is there a way to do it in 5.x?
>
> ________________________________________
> From: rsyslog-bounces [at] lists [rsyslog-bounces [at] lists] On Behalf Of Vlad Grigorescu [vladg [at] cmu]
> Sent: Friday, August 10, 2012 4:38 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Turning on compression only for some logfiles?
>
> From the documentation at <http://www.rsyslog.com/doc/omfile.html>:
>
> Action specific Configuration Directives:
>
> - ZipLevel 0..9 [default 0]
> if greater 0, turns on gzip compression of the output file. The higher the number, the better the
> compression, but also the more CPU is required for zipping.
>
> Sample:
>
> *.* action(type="omfile"
> DirCreateMode="0700"
> FileCreateMode="0644"
> File= "/var/log/messages")
>
> So, to change compression for that particular action, just add a ZipLevel=$whatever to the action line.
>
> --Vlad
>
> On Aug 10, 2012, at 5:03 PM, Chastity Blackwell <chas [at] aggregateknowledge>
> wrote:
>
>> I'm working on some new rsyslog configs for our log archiving hosts, and
>> one of the things I'd like to do in the new configs is have rsyslog
>> write to the aggregate log archives with gzip compression, but I don't
>> want to have its system logs being written to /var/log in a compressed
>> format (just so they are easier to read if I just want to debug that
>> particular host). Can I specify $OMFileZipLevel for a single ruleset
>> somehow, or can I only specify that globally?
>>
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

RSyslog users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.