rsyslog truncate filenames

Issues related to applications and software problems
Post Reply
ilak
Posts: 7
Joined: 2017/11/09 15:35:49

rsyslog truncate filenames

Post by ilak » 2018/09/11 13:12:26

Hello, I am using rsyslog to send logfiles to bastions but I am having problems :

On /var/log/messages I have :

Code: Select all

Sep 11 14:54:52 server1 rsyslogd: message too long (16394) with configured size 8096, begin of message is: [...] [v8.36.0 try http://www.rsyslog.com/e/2445 ]
So I added

Code: Select all

$MaxMessageSize 48k
on the client and on the server and now I have another problem.
The server has a lot of unwanted log files, for example :

Code: Select all

'ractSlingFilterChain.doFilter(AbstractSlingFilterChain.java.log'
'org.apache.sling.scripting.jsp.jasper.runtime.HttpJspBase.service(HttpJspBase.java.log'
'ntact".log'
They look like truncated messages on log files.

For information I am using this template :

Code: Select all

$template RemoteHost,"/var/log//RSYS/%FROMHOST%/%PROGRAMNAME%.log
Server version : Centos 7.5 ; rsyslog-8.24.0-12.el7.x86_64
Client version : Centos 6.7 ; rsyslog-8.36.0-2.el6.x86_64

Forwarding on the client :

Code: Select all

input(type="imfile" File="/var/log/api.log" Tag="api" readMode="2" Facility="local3")
local3.* action(type="omfwd"
      queue.type="linkedlist"
      queue.filename="server1"
      action.resumeRetryCount="-1"
      queue.saveOnShutdown="on"
      target="server_bastion" port="514" protocol="tcp"
     )
Any idea?
Thanks a lot.

Post Reply