MonitorWare Knowledge Base

We are currently looking to try rsyslog across the entire production environment, however we have concerns if rsyslog has the same RFC 3195 limitations in regards to buffer size (1k) as syslogd.

I've looked all over the forums and documentation and can not find out an exact yes or no in regards to this.

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

I think here is a misunderstanding. syslogd does NOT support RFC 3195 at all. So I assume you are actually talking about the 1K udp limit that most syslogd's have and that is described in RFC 31264. Rsyslog does not have it, it depends on how you compile. The default, I think, is 2 or 4K. With RFC 3195, rsyslog obeys to the 1K limit specified in the standard, so here you can't use any larger message size.

HTH
Rainer

Thank you, that is exactly what I was wondering, we do have many java applications running so dumps are more than 1k