[syslog-ng] rabbitmq errors

[Al Itchon]

So are messages lost when this happens, or are they resent when after reconnection?

From: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Scheidler, Balázs
Sent: Thursday, November 26, 2015 2:47 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: Re: [syslog-ng] rabbitmq errors


Nothing intended limits syslog-ng here. That error message happens when rabbitmq returns an error condition. It definitely should include a more detailed error cause.

Syslog-ng suspends this destination for a few seconds (controlled by time-reopen ()) And then reconnects to the amqp server.
I’m seeing an error in my log indicating that messages aren’t being sent to a queue in RabbitMQ.  This happens a few times a week.  Here’s the error:

Nov 24 13:29:28 syslog09 syslog-ng[7883]: Network error while inserting into AMQP server; time_reopen='10'

I have about 1000 servers sending tcp messages through a call to /dev/tcp to port on the syslog-ng server.  It seems messages aren’t sent to the queue for about 1 or 2 minutes, and then it resumes sending again without error.  Could this be a network issue or something within syslog-ng that’s limiting the messages?

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20151130/87d16919/attachment.htm