<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>This is my first time posting here. I hope you can help me.</p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">We have 8
collector servers running syslog probes. They also run a
collector application.</span><br style="box-sizing: border-box;
color: rgb(39, 39, 39); font-family: "IBM Plex Sans",
"Helvetica Neue", Arial, sans-serif; font-size: 16px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; font-weight: 400; letter-spacing:
normal; orphans: 2; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial;">
<span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">Syslog-ng
receives all alarms through UDP Ports, filter them, and write a
fifo. It also forwards these alarms through UDP to another
server. We are using this another server that receives these
forwarded messages as a validation point.</span><br
style="box-sizing: border-box; color: rgb(39, 39, 39);
font-family: "IBM Plex Sans", "Helvetica
Neue", Arial, sans-serif; font-size: 16px; font-style:
normal; font-variant-ligatures: normal; font-variant-caps:
normal; font-weight: 400; letter-spacing: normal; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-thickness: initial; text-decoration-style:
initial; text-decoration-color: initial;">
<span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">There are
some filter rules for the pipe delivery, and no filters for UDP
delivery.</span><br style="box-sizing: border-box; color:
rgb(39, 39, 39); font-family: "IBM Plex Sans",
"Helvetica Neue", Arial, sans-serif; font-size: 16px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; font-weight: 400; letter-spacing:
normal; orphans: 2; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial;">
<span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">But we could
see several not filtered alarms being received at the UDP
receiver server, but not being received by the collector
application, that reads from the fifo (</span><span
style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;"><font
face="Courier New, Courier, monospace">/opt/solution/src1.pipe)</font>.
Collector logs have no error lines.</span><br style="box-sizing:
border-box; color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial;">
<br style="box-sizing: border-box; color: rgb(39, 39, 39);
font-family: "IBM Plex Sans", "Helvetica
Neue", Arial, sans-serif; font-size: 16px; font-style:
normal; font-variant-ligatures: normal; font-variant-caps:
normal; font-weight: 400; letter-spacing: normal; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-thickness: initial; text-decoration-style:
initial; text-decoration-color: initial;">
<span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">I tried
rewrititng syslog-ng configuration file, in order to use
flow-control, that, according to syslog-ng documentation, is
necessary for high volume environments (as this is the case
here, 500-1000 alarms per second).</span><br style="box-sizing:
border-box; color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial;">
<span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">I applied it
yesterday, together with net.core.rmem_max=1024000, and the
scenario got even worst. We noticed missing messages on the UDP
destination server and on the fifo. Dropped packets counter on
ifconfig was increasing quickly. We rolled back to the previous
syslog-ng configuration. <br>
</span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">Below, you
will find the first version of the syslog-ng.conf file, without
flow-control (several names , filters and addresses were changed
in sake of privacy):</span></p>
<p><font face="Courier New, Courier, monospace">@version:3.19<br>
@include "scl.conf"<br>
<br>
# syslog-ng configuration file.<br>
#<br>
# This should behave pretty much like the original syslog on
RedHat. But<br>
# it could be configured a lot smarter.<br>
#<br>
# See syslog-ng(8) and syslog-ng.conf(5) for more information.<br>
#<br>
# Note: it also sources additional configuration files (*.conf)<br>
# located in /etc/syslog-ng/conf.d/<br>
<br>
options {<br>
flush_lines (0);<br>
time_reopen (10);<br>
log_fifo_size (1000);<br>
chain_hostnames (off);<br>
use_dns (no);<br>
use_fqdn (no);<br>
create_dirs (no);<br>
keep_hostname (yes);<br>
};<br>
<br>
source s_sys {<br>
system();<br>
internal();<br>
# udp(ip(0.0.0.0) port(514));<br>
};<br>
<br>
template t_customer { template("${DATE} ${SOURCEIP} ${HOST}
${MSGHDR} ${MESSAGE}\n"); };<br>
<br>
# UDP Source<br>
destination d_cons { file("/dev/console"); };<br>
destination d_mesg { file("/var/log/messages"); };<br>
destination d_auth { file("/var/log/secure"); };<br>
destination d_mail { file("/var/log/maillog" flush_lines(10));
};<br>
destination d_spol { file("/var/log/spooler"); };<br>
destination d_boot { file("/var/log/boot.log"); };<br>
destination d_cron { file("/var/log/cron"); };<br>
destination d_kern { file("/var/log/kern"); };<br>
destination d_mlal { usertty("*"); };<br>
<br>
filter f_kernel { facility(kern); };<br>
filter f_default { level(info..emerg) and<br>
not (facility(mail)<br>
or facility(authpriv)<br>
or facility(cron)); };<br>
filter f_auth { facility(authpriv); };<br>
filter f_mail { facility(mail); };<br>
filter f_emergency { level(emerg); };<br>
filter f_news { facility(uucp) or<br>
(facility(news)<br>
and level(crit..emerg)); };<br>
filter f_boot { facility(local7); };<br>
filter f_cron { facility(cron); };<br>
<br>
#log { source(s_sys); filter(f_kernel); destination(d_cons); };<br>
#log { source(s_sys); filter(f_kernel); destination(d_kern); };<br>
log { source(s_sys); filter(f_default); destination(d_mesg); };<br>
log { source(s_sys); filter(f_auth); destination(d_auth); };<br>
log { source(s_sys); filter(f_mail); destination(d_mail); };<br>
log { source(s_sys); filter(f_emergency); destination(d_mlal);
};<br>
log { source(s_sys); filter(f_news); destination(d_spol); };<br>
log { source(s_sys); filter(f_boot); destination(d_boot); };<br>
log { source(s_sys); filter(f_cron); destination(d_cron); };<br>
<br>
#Debug<br>
filter f_debu_1 { not level(debug); };<br>
<br>
#Information<br>
filter f_info_1 { not match("PROGRAM-" value("MESSAGE")) };<br>
filter f_info_2 { not match("Multicast Client"
value("MESSAGE")); };<br>
filter f_info_3 { not match("executeCommand" value("MESSAGE"));
};<br>
filter f_info_4 { not match("has the privilege to execute"
value("MESSAGE")); };<br>
filter f_info_5 { not match("Telnet " value("MESSAGE")); };<br>
<br>
#Warning<br>
filter f_warn_1 { not match("LSP went Up" value("MESSAGE")); };<br>
filter f_warn_2 { not match("LSP went Down" value("MESSAGE"));
};<br>
filter f_warn_3 { not match("Subscriber created"
value("MESSAGE")); };<br>
filter f_warn_4 { not match("Subscriber deleted"
value("MESSAGE")); };<br>
filter f_warn_5 { not match("BGP-WARN" value("MESSAGE")); };<br>
filter f_warn_6 { not match("DHCPS-WARNING" value("MESSAGE"));
};<br>
filter f_warn_7 { not match("DHCP-WARNING" value("MESSAGE")); };<br>
<br>
#Notice<br>
filter f_noti_1 { not match("iCDR\[[0-9]+\]:"); };<br>
<br>
#Error<br>
filter f_erro_1 { not match("FAN started working"
value("MESSAGE")); };<br>
filter f_erro_2 { not match("FAN is not working"
value("MESSAGE")); };<br>
<br>
#Alert<br>
filter f_aler_1 { not match("LDP virtual tunnel went"
value("MESSAGE")); };<br>
<br>
#Critical<br>
filter f_crit_1 { not match("traps dropped" value("MESSAGE"));
};<br>
filter f_crit_2 { not match("upstream E1 signals"
value("MESSAGE")); };<br>
filter f_crit_3 { not match(",ABCDE," value("MESSAGE")); };<br>
filter f_crit_4 { not match(",XYZW," value("MESSAGE")); };<br>
filter f_crit_5 { not match(" for ABCDE-[0-9]"
value("MESSAGE")); };<br>
source s_dummy{ udp(ip(0.0.0.0) port(5140)); };<br>
source src1{ udp(ip(0.0.0.0) port(514)); };<br>
source s_10514{ udp(ip(0.0.0.0) port(10514)); };<br>
source src2{ udp(ip(0.0.0.0) port(515)); };<br>
destination d_src1 { pipe("/opt/solution/src1.pipe"
template(t_customer)); };<br>
destination d_src2 { pipe("/opt/solution/src2.pipe"
template(t_customer)); };<br>
destination d_syslogCustom{
pipe("/opt/solution/syslog_custom.pipe" template(t_customer));
};<br>
destination d_udp_dst{ syslog("192.168.1.151" transport("udp")
port(514) spoof_source(no)); };<br>
filter f_src2 { host("r(core|distribution|management).*") or
host("^abcd.*") or host("^d2") or host("src2") or host("xyz1")
or host("^jkl") or host("asddf") or host("zxcvb"); };<br>
log {<br>
source(src1);<br>
source(s_10514);<br>
filter(f_debu_1);<br>
filter(f_info_1);<br>
filter(f_info_2);<br>
filter(f_info_3);<br>
filter(f_info_4);<br>
filter(f_info_5);<br>
filter(f_warn_1);<br>
filter(f_warn_2);<br>
filter(f_warn_3);<br>
filter(f_warn_4);<br>
filter(f_warn_5);<br>
filter(f_warn_6);<br>
filter(f_warn_7);<br>
filter(f_noti_1);<br>
filter(f_erro_1);<br>
filter(f_erro_2);<br>
filter(f_aler_1);<br>
filter(f_crit_1);<br>
filter(f_crit_2);<br>
filter(f_crit_3);<br>
filter(f_crit_4);<br>
filter(f_crit_5);<br>
destination(d_src1);<br>
};<br>
<br>
log {<br>
source(src2);<br>
filter(f_src2);<br>
destination(d_src2);<br>
};<br>
<br>
log {<br>
source(src1);<br>
destination(d_udp_dst);<br>
};</font><br>
</p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">That's all.<br>
</span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">I Also tried
using flow-control. The main achanges are below:</span></p>
<p><font face="Courier New, Courier, monospace"><span style="color:
rgb(39, 39, 39); font-size: 16px; font-style: normal;
font-variant-ligatures: normal; font-variant-caps: normal;
font-weight: 400; letter-spacing: normal; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);
text-decoration-thickness: initial; text-decoration-style:
initial; text-decoration-color: initial; display: inline
!important; float: none;">source src1{<br>
# udp(<br>
network( #new driver syntax<br>
transport("udp") #new driver syntax<br>
ip(0.0.0.0)<br>
port(514)<br>
max-connections(3000) <br>
);<br>
};<br>
source s_10514{<br>
# udp(<br>
network( #new driver syntax<br>
transport("udp") #new driver syntax<br>
ip(0.0.0.0)<br>
port(10514)<br>
max_connections(3000) <br>
);<br>
};<br>
source src2{<br>
# udp(<br>
network( #new driver syntax<br>
transport("udp") #new driver syntax<br>
ip(0.0.0.0)<br>
port(515)<br>
max_connections(3000)<br>
);<br>
};</span></font></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;"><font
face="Courier New, Courier, monospace">destination d_src1 {<br>
pipe(<br>
"/opt/solution/src1.pipe"<br>
template(t_customer)<br>
log_fifo_size(600000) <br>
);<br>
};<br>
destination d_src2 {<br>
pipe(<br>
"/opt/solution/src2.pipe"<br>
template(t_customer)<br>
log_fifo_size(300000)<br>
);<br>
};<br>
destination d_udp_dst{<br>
syslog(<br>
"192.168.1.151"<br>
transport("udp")<br>
port(514)<br>
spoof_source(no)<br>
log_fifo_size(300000) <br>
);<br>
};</font><br>
</span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">And the
situation got even worst.<br>
</span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">So, I would
like to ask you:</span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">How can I fix
it? I need to be sure that all data received is forwarded to
their destinations, respecting the filters, and without any
information loss.<br>
</span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">I'm quite
sure all data is being received, I've checked it using tcpdump,
no udp packet loss during transmission.</span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;">The most
important sessions are: <br>
</span></p>
<p><br>
<span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;"><font
face="Courier New, Courier, monospace">log {<br>
source(src1);<br>
source(s_10514);<br>
filter(f_debu_1);<br>
filter(f_info_1);<br>
filter(f_info_2);<br>
filter(f_info_3);<br>
filter(f_info_4);<br>
filter(f_info_5);<br>
filter(f_warn_1);<br>
filter(f_warn_2);<br>
filter(f_warn_3);<br>
filter(f_warn_4);<br>
filter(f_warn_5);<br>
filter(f_warn_6);<br>
filter(f_warn_7);<br>
filter(f_noti_1);<br>
filter(f_erro_1);<br>
filter(f_erro_2);<br>
filter(f_aler_1);<br>
filter(f_crit_1);<br>
filter(f_crit_2);<br>
filter(f_crit_3);<br>
filter(f_crit_4);<br>
filter(f_crit_5);<br>
destination(d_src1);<br>
};</font></span></p>
<p><span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;"><font
face="Courier New, Courier, monospace"><font face="Courier
New, Courier, monospace">log {<br>
source(src1);<br>
destination(d_udp_dst);<br>
};</font></font></span></p>
<p class="MsoNormal"
style="margin-bottom:0cm;margin-bottom:.0001pt;line-height:
normal"><span style="color: rgb(39, 39, 39); font-family:
"IBM Plex Sans", "Helvetica Neue", Arial,
sans-serif; font-size: 16px; font-style: normal;
font-variant-ligatures: normal; font-variant-caps: normal;
font-weight: 400; letter-spacing: normal; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-thickness: initial; text-decoration-style:
initial; text-decoration-color: initial; display: inline
!important; float: none;"></span><span style="color: rgb(39, 39,
39); font-family: "IBM Plex Sans", "Helvetica
Neue", Arial, sans-serif; font-size: 16px; font-style:
normal; font-variant-ligatures: normal; font-variant-caps:
normal; font-weight: 400; letter-spacing: normal; orphans: 2;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); text-decoration-thickness: initial; text-decoration-style:
initial; text-decoration-color: initial; display: inline
!important; float: none;">Thanks a lot, and sorry for the huge
message,</span></p>
<p class="MsoNormal"
style="margin-bottom:0cm;margin-bottom:.0001pt;line-height:
normal">Richter<br>
<span style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;"></span><span
style="color: rgb(39, 39, 39); font-family: "IBM Plex
Sans", "Helvetica Neue", Arial, sans-serif;
font-size: 16px; font-style: normal; font-variant-ligatures:
normal; font-variant-caps: normal; font-weight: 400;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); text-decoration-thickness:
initial; text-decoration-style: initial; text-decoration-color:
initial; display: inline !important; float: none;"></span><a
href="https://www.linkedin.com/company/icarotech"
target="_blank"><span
style="font-size:9.5pt;font-family:"Arial",sans-serif;mso-fareast-font-family:
"Times New
Roman";color:#1155CC;mso-fareast-language:PT-BR;mso-no-proof:yes;
text-decoration:none;text-underline:none"><span
style="mso-ignore:vglayout"></span><!--[endif]--></span></a><span
style="font-size:
9.5pt;font-family:"Arial",sans-serif;mso-fareast-font-family:"Times
New Roman"; mso-fareast-language:PT-BR"><o:p></o:p></span></p>
<div class="moz-signature">
<table class="MsoNormalTable" style="width:412.5pt;
mso-cellspacing:1.5pt;border:none;border-top:solid #C8C8C8
1.0pt;mso-border-top-alt: solid #C8C8C8
.75pt;mso-yfti-tbllook:1184;mso-padding-alt:7.5pt 7.5pt 7.5pt
7.5pt" width="0" cellpadding="0" border="1">
<tbody>
<tr style="mso-yfti-irow:0;mso-yfti-firstrow:yes">
<td style="width:315.0pt;border:none;padding:7.5pt 7.5pt
7.5pt 7.5pt" width="374" valign="top"><br>
</td>
<td style="width:112.5pt;border:none;padding:7.5pt 7.5pt
7.5pt 7.5pt" width="173"> <br>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>