Skip to main content
Unix & Linux

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

4
  • These messages that you're losing: are they being delivered by the network, or generated locally? If they're over the network and you're using UDP then there's no guarantee that they'll even get delivered, so it might not be rsyslog that is dropping them. You would need to configure the reliable delivery component of rsyslog and run rsyslog on all your message generators. Commented May 6, 2015 at 14:06
  • Messages are generated locally. But final storage of these messages are on different server and there i am seeing lost messages in logs. I am updating my original question with the logs which i am getting thus showing me lost messages. Commented May 6, 2015 at 14:09
  • OK. Same question but asked differently then. How close to the source of the messages are you finding messages are being lost? If messages are being stored on a different server are you delivering messages across the network connection using the reliable delivery feature of rsyslog? Commented May 6, 2015 at 14:11
  • I am reading logs using imuxsock over unix sockets on local machine and then those logs are send to another machine using omrelp. Also please see my update in question which contain logs showing that logs are lost due to rate limiting. Commented May 6, 2015 at 14:15