rsyslogd - nimrody/knowledgebase GitHub Wiki

  • rsyslogd 5.8 documentation

    ### begin forwarding rule

    The statement between the begin ... end define a SINGLE forwarding

    rule. They belong together, do NOT split them. If you create multiple

    forwarding rules, duplicate the whole block!

    Remote Logging (we use TCP for reliable delivery)

    An on-disk queue is created for this action. If the remote host is

    down, messages are spooled to disk and sent when it is up again.

    $WorkDirectory /var/lib/rsyslog # where to place spool files $ActionQueueFileName fwdRule1 # unique name prefix for spool files $ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible) $ActionQueueSaveOnShutdown on # save messages to disk on shutdown $ActionQueueType LinkedList # run asynchronously $ActionResumeRetryCount -1 # infinite retries if host is down

    remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional

    . @@remote-host:514

    $template LogglyFormat,"<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid% [8367f52e-70e1-4dcc-bb5e-64529a221684@41058 tag="catalogA"] %msg%\n"

    Send messages to Loggly over TCP using the template.

    local6.* @@logs-01.loggly.com:514;LogglyFormat

    $MaxMessageSize 64k

⚠️ **GitHub.com Fallback** ⚠️