[syslog-ng] Prevent message loss while using tcp output

[Balazs Scheidler]

Google for Log-fifo-size
On May 3, 2013 7:47 AM, "Abhijeet Rastogi" <abhijeet.1989 at gmail.com> wrote:

> Hi all,
>
> I've source defined as:
>
> source s_sys {
>         file ("/proc/kmsg" program_override("kernel: "));
>         unix-stream ("/dev/log");
>         internal();
>         udp(ip(0.0.0.0) port(514));
> };
>
> And one of the destination as:
>
> destination d_logstash { tcp( "127.0.0.1" port(515)
> template(t_both_timestamps) flush_lines(10)); };
>
> Problem is when my consumer is down, I can see messages being dropped
> in "syslog-ng-ctl stats".
>
> How can I avoid this at the expense of memory (like a queueing
> mechanism or something)?
>
>
> --
> Regards,
> Abhijeet Rastogi (shadyabhi)
> http://blog.abhijeetr.com
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20130503/2872ccb4/attachment.htm