Concepts

This chapter describes important rsyslog concepts and objects. Where appropriate, it also refers to configurations settings to affect the respective objects.

• Understanding rsyslog Queues
  • Where are Queues Used?
  • Queue Modes
  • Limiting the Queue Size
  • Worker Thread Pools
  • Filled-Up Queues
• The Janitor Process
• Message parsers in rsyslog
  • Intro
  • What are message parsers?
  • How are message parsers used?
  • Which message parsers are available
  • Conclusion
• Multiple Rulesets in rsyslog
  • What is a Ruleset?
  • What does “To bind to a Ruleset” mean?
  • Why are rulesets important for different parser configurations?
  • Can I use a different Ruleset as the default?
  • Rulesets and Queues
  • Examples
  • Performance
  • See Also
• NetStream Drivers
  • Current Network Stream Drivers

See also

Help with configuring/using Rsyslog:

• Mailing list - best route for general questions
• GitHub: rsyslog source project - detailed questions, reporting issues that are believed to be bugs with Rsyslog
• Stack Exchange (View, Ask) - experimental support from rsyslog community

See also

Contributing to Rsyslog:

• Source project: rsyslog project README.
• Documentation: rsyslog-doc project README

Copyright 2008-2020 Rainer Gerhards (Großrinderfeld), and Others.