MonitorWare Knowledge Base

Hello, I have been having a problem lately where rsyslog is dropping logs that the server is receiving I am only receiving about 23/sec and for the most part only about 25% are being written to my mysql table. I have tried almost every version and the problem seems to persist. The problem didn't start until I added the template. Thank you!

My config is as follows -

Code: Select all

$ModLoad imudp
$UDPServerRun 514
$UDPServerRun 1514

$ModLoad ommysql.so

$template MySQLInsert,"INSERT INTO SystemEvents_%$DAY% (ReceivedAt,DeviceReportedTime,Facility,Priority,FromHost,Message,InfoUnitID,SysLogTag) VALUES ('%timegenerated:::date-mysql%','%timereported:::date-mysql%','%syslogfacility%','%syslogpriority%','%hostname%','%msg%','1','%syslogtag%')\r\n",stdsql


*.*       :ommysql:127.0.0.1,logd,root,901jackson;MySQLInsert


• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

I'll keep everyone posted but the most recent devel version seems to be working for me right now.

It seems to be doing it again. I wonder if it has something to do with me dynamically select the table?

Just some additional information -

When I startup rsyslogd I can see the UDP packets received increasing in "netstat -s" however after about 5 seconds it stops and the UDP packet receive errors starts increasing. I have tried to adjust the UDP buffer size and that does not seem to make a difference.

Hope someone can help.