MonitorWare Knowledge Base

Code: Select all

<snip>
## June 2009 added for incoming message buffering per
## http://www.rsyslog.com/doc-rsyslog_high_database_rate.html

$ModLoad imudp    # network reception
$UDPServerRun 514 # start a udp server at port 514
$TCPServerRun 514 # start a tcp server at port 514
$ModLoad imuxsock # local message reception

$WorkDirectory /var/spool/rsyslog # default location for work (spool) files

$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName dbq    # set file name, also enables disk mode
$ActionResumeRetryCount -1  # infinite retries on insert failure



Jun 12 10:42:54 netmon rsyslogd: [origin software="rsyslogd" swVersion="2.0.6" x-pid="15168" x-info="http://www.rsyslog.com"] exiting on signal 15.
Jun 12 10:42:54 netmon rsyslogd: [origin software="rsyslogd" swVersion="2.0.6" x-pid="15218" x-info="http://www.rsyslog.com"][x-configInfo udpReception="Yes" udpPort="514" tcpReception="Yes" tcpPort="514"] restart
Jun 12 10:42:54 netmon rsyslogd:could not load module '/usr/lib/rsyslog/imudp', dlopen: /usr/lib/rsyslog/imudp: cannot open shared object file: No such file or directory
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 49
Jun 12 10:42:54 netmon rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 50
Jun 12 10:42:54 netmon rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 51
Jun 12 10:42:54 netmon rsyslogd:could not load module '/usr/lib/rsyslog/imuxsock', dlopen: /usr/lib/rsyslog/imuxsock: cannot open shared object file: No such file or directory
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 52
Jun 12 10:42:54 netmon rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 54
Jun 12 10:42:54 netmon rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 56
Jun 12 10:42:54 netmon rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 57
Jun 12 10:42:54 netmon rsyslogd:invalid or yet-unknown config file command - have you forgotten to load a module?
Jun 12 10:42:54 netmon rsyslogd:the last error occured in /etc/rsyslog.conf, line 58
Jun 12 10:42:54 netmon kernel: rklogd 2.0.6, log source = /proc/kmsg started.

cat /etc/sysconfig/rsyslog
# Options to syslogd
# -m 0 disables 'MARK' messages.
# -rPortNumber Enables logging from remote machines. The listener will listen to the specified port.
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
#SYSLOGD_OPTIONS="-m 0"
SYSLOGD_OPTIONS="-m 0 -r -x -t514"
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
# once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Code: Select all

$ModLoad imudp.so                     
$UDPServerRun 514