On /var/log/messages I have :
Code: Select all
Sep 11 14:54:52 server1 rsyslogd: message too long (16394) with configured size 8096, begin of message is: [...] [v8.36.0 try http://www.rsyslog.com/e/2445 ]
Code: Select all
$MaxMessageSize 48k
The server has a lot of unwanted log files, for example :
Code: Select all
'ractSlingFilterChain.doFilter(AbstractSlingFilterChain.java.log'
'org.apache.sling.scripting.jsp.jasper.runtime.HttpJspBase.service(HttpJspBase.java.log'
'ntact".log'
For information I am using this template :
Code: Select all
$template RemoteHost,"/var/log//RSYS/%FROMHOST%/%PROGRAMNAME%.log
Client version : Centos 6.7 ; rsyslog-8.36.0-2.el6.x86_64
Forwarding on the client :
Code: Select all
input(type="imfile" File="/var/log/api.log" Tag="api" readMode="2" Facility="local3")
local3.* action(type="omfwd"
queue.type="linkedlist"
queue.filename="server1"
action.resumeRetryCount="-1"
queue.saveOnShutdown="on"
target="server_bastion" port="514" protocol="tcp"
)
Thanks a lot.