I am using rsyslog v5.8.11. I found this version number from what rsyslog logs on restart.
I am trying to apply rate-limiting in rsyslog but it is of no use. I am still losing messages. In the configuration file I put these options to implement rate-limiting
$SystemLogRateLimitInterval 5
$SystemLogRateLimitBurst 10000
This is of no use as I am still losing messages at the same rate. I even tried to put
$SystemLogRateLimitInterval 0
This should have stopped the rate-limiting feature of rsyslog but instead nothing happened. I am still losing message. These logs are critical to me.
Is there any way possible to stop losing messages in rsyslog.
UPDATE
On restart i also found this in rsyslog logs.
rsyslogd: invalid selector line (port), probably not doing what was intended
Is losing logs somehow related to this error.
There are the logs showing that i am losing logs due to rate-limiting.
rsyslogd-2177: imuxsock begins to drop messages from pid 25810 due to rate-limiting
rsyslogd-2177: imuxsock lost 103 messages from pid 25810 due to rate-limiting
Such type of logs are coming no matter what setting is applied by me. If logs are lost due to UDP will rsyslog log in this manner too?