rsyslog: comment out splunk receiver to unblock rsyslog
Splunk receiver seems unresponsive since Feb 12 and result in rsyslog on log01 to stop logging. I disabled it for now so we don't loose more logs.
This commit is contained in:
parent
f6d4ffc6f4
commit
6f949fe3eb
1 changed files with 15 additions and 15 deletions
|
@ -161,21 +161,21 @@ kern.* ?r_kern;TraditionalFormat
|
||||||
#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#
|
#%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%#
|
||||||
|
|
||||||
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
|
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
|
||||||
*.* action(
|
# *.* action(
|
||||||
type="omfwd"
|
# type="omfwd"
|
||||||
target="10.31.20.29"
|
# target="10.31.20.29"
|
||||||
port="6514"
|
# port="6514"
|
||||||
protocol="tcp"
|
# protocol="tcp"
|
||||||
queue.filename="fwdRule1" # unique name prefix for spool files
|
# queue.filename="fwdRule1" # unique name prefix for spool files
|
||||||
queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
|
# queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
|
||||||
queue.saveonshutdown="on" # save messages to disk on shutdown
|
# queue.saveonshutdown="on" # save messages to disk on shutdown
|
||||||
queue.type="LinkedList" # run asynchronously
|
# queue.type="LinkedList" # run asynchronously
|
||||||
queue.size="500000"
|
# queue.size="500000"
|
||||||
action.resumeRetryCount="10" # 10 retries if host is down
|
# action.resumeRetryCount="10" # 10 retries if host is down
|
||||||
StreamDriver="gtls"
|
# StreamDriver="gtls"
|
||||||
StreamDriverMode="1"
|
# StreamDriverMode="1"
|
||||||
StreamDriverAuthMode="anon" # not authenticated
|
# StreamDriverAuthMode="anon" # not authenticated
|
||||||
)
|
# )
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue