Menu
I configured a centralized syslog on Ubuntu 12.04.
I set the max message size on both servers
$MaxMessageSize 20k
I have 2 different comportment :
I can find configuration of any other buffer size.
Is it a limitation of rsyslog or a configuration problem ?
Thanks for your help.
Fred
357
A Linux host running rsyslog can send all or individual logs to another rsyslog host over a TCP or UDP connection.
rsyslog is capable of forwarding logs to remote servers. The configuration is relatively simple and makes it possible for Linux admins to centralize log files for archiving and troubleshooting.
After the rsyslogd daemon is configured to log system messages, the rsyslogd daemon starts with a default command-line argument of -c5 . This option ensures that the rsyslogd daemon starts in a normal mode and is not compatible with an earlier version.
The rsyslog. conf file is the main configuration file for the rsyslogd(8) which logs system messages on *nix systems. This file specifies rules for logging. For special features see the rsyslogd(8) manpage.
I found the solution.
The parameter :
$MaxMessageSize 20k
must be set before network declaration (at the top of rsyslog.conf file) :
$ModLoad imtcp
$InputTCPServerRun 1514
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With