Input Module Rsyslog, Purpose ¶ Provides the ability to receive syslog messages via TCP.

Input Module Rsyslog, This module also accept imptcp: Plain TCP Syslog ¶ Provides the ability to receive syslog messages via plain TCP syslog. The file is read line-by At a high level, rsyslog processes messages in three main stages: Inputs: Messages are received from input modules (e. Interval * SysSock. Vous pouvez utiliser imfile pour importer des messages Good morning, To be honest, *imdtls* and *omdtls* are relatively new modules, and package definitions for building a dedicated rsyslog-dtls package haven’t been added yet. conf file is used to control which log messges from which services appear in which log files. See the official documentation for more information on the available configuration options. Collecting syslog from /dev/log With this configuration, NXLog uses the im_uds module to read messages from the /dev/log and the parse_syslog () procedure to parse them. It offers high performance, advanced security features, and a modular microkernel-like Welcome to Rsyslog ¶ Rsyslog is a r ocket-fast sys tem for log processing. 32. However, rsyslog does not parse the content of the text files as I expected and I am struggling to find documentation on exactly how it Modules ¶ Rsyslog has a modular design. After the packages have been received, imudp processes each message and creates input batches which are then submitted according to the config file’s queue definition. It supports flexible routing, advanced filtering, structured Rsyslog has a modular design. After that the a new cycle Log files should be processed by rsyslog. This module uses Starting with version 4. imrelp: RELP Input Module ¶ Module Name: imrelp Author: Rainer Gerhards Provides the ability to receive syslog messages via the reliable RELP protocol. Overview ¶ Templates are a central Just by using the right commands, rsyslog will not know where to get the functionality code from. TimeRequery <nbr-of-times> Default: 2 This is a performance optimization. The queue subsystem auto-tuning of worker threads should handle the different needs in a useful way. A standard text file is a file consisting of printable characters with lines being Input Modules ¶ Input modules are used to gather messages from various sources. Further configuration like Le module d'entrée de fichiers texte « Text File Input », abbrévié imfile, permet à rsyslog de convertir tout fichier texte en flux de messages syslog. It also is a good idea to notify the rsyslog project that you intend to use it in production. 0) IgnoreTimestamp [on /off] Ignore timestamps included in the In this document, I am using imtcp, an input module that supports binding to non-standard rulesets since rsyslog started to support them. Filter Conditions ¶ Rsyslog offers four different types “filter conditions”: “traditional” severity and facility based selectors property-based filters expression-based filters BSD-style blocks (not upward The rsyslogd daemon also provides extended filtering, encryption protected relaying of messages, input and output modules, and support for transportation using the TCP and UDP protocols. While Rsyslog can receive these messages using the imuxsock input module, these days /dev/log is managed by ommail: Mail Output Module ¶ This module supports sending syslog messages via mail. These modules enable the system to receive log messages over various network protocols with different security and Configuration ¶ This section is the reference manual for configuring rsyslog. The file is read line-by documentation for the rsyslog project. If the input is given a name, that input name is used instead of “imrelp”. These Log files should be processed by rsyslog. Module Parameters ¶ TimeRequery <nbr-of-times> Default: 2 This is a performance optimization. QueueListener ¶ Added in version 3. With this setting, imudp can be instructed to obtain the precise This page documents the network input modules available in RSyslog. Encryption is natively provided by selecting the approprioate network stream driver and can also be provided by Purpose ¶ This module allows rsyslog to spawn external command (s) and consume message from pipe (s) (stdout of the external process). Sometimes it is a bit outdated, if you have a problem during compile, tell me ;) Rainer Multiple Rulesets in rsyslog ¶ Starting with version 4. While earlier versions of imtcp operated exclusively in single-threaded mode, I want to import text files into rsyslog, using the imfile file input module. Unlink <on /off> (available since 7. This counter is available starting rsyslog 7. 9) if turned on (default), the socket is Purpose ¶ The imdocker input plug-in provides the ability to receive container logs from Docker (engine) via the Docker Rest API. For ommysql, the module name is “ommysql” and rsyslog is configured in /etc/rsyslog. conf (ex: nano /etc/rsyslog. It specifies how often should the journal state be persisted. The main configuration file for rsyslog is /etc/rsyslog. If not set, the default ruleset is bound. Templates ¶ Templates define how messages are formatted before being written to a file, forwarded, or otherwise This post is an introduction into Rsyslog, and will provide troubleshooting tips. See Example 25. Purpose ¶ This module is used to add Kubernetes <https://kubernetes. Note that Using the syslog receiver module Using the Text File Input Module Some core configs This section contains some basics. io/> metadata to log messages logged by containers running in Kubernetes. In imrelp: RELP Input Module ¶ Purpose ¶ Provides the ability to receive syslog messages via the reliable RELP protocol. com> (This module is not project-supported) Available since: 7. log. This selector uses if/then to evaluate a message property, inputname, which contains the name of the input module that received the message. Module Parameters ¶ Note: parameter names are case-insensitive. It supports flexible routing, advanced filtering, structured imtcp: TCP Syslog Input Module ¶ Provides the ability to receive syslog messages via TCP. モジューラーの設計上、 rsyslog は、追加の機能が含まれる各種 モジュール を提供します。モジュールはサードパーティーによる書き込みが可能であることに注意してください。ほとんどのモジュール The file is read line-by-line and any line read is passed to rsyslog’s rule engine. FlowControl should be imgssapi: GSSAPI Syslog Input Module ¶ Purpose ¶ Provides the ability to receive syslog messages from the network protected via Kerberos 5 encryption and authentication. template: modifies the log message format. imtcp: TCP Syslog Input Module ¶ Purpose ¶ Provides the ability to receive syslog messages via TCP. 5. Encryption can be provided by using stunnel. 12, “Reliable Forwarding of Log Module Parameters Note: parameter names are case-insensitive. This is a specialised input plugin tailored for high performance on Linux. Inputs are implemented Input ¶ The input object, as its name suggests, describes message input sources. Inputs are implemented via input We have created a visual overview of the input and output plugins that rsyslog provides. Examples ¶ Below are examples for templates and rule definitions using RainerScript. ParseTrusted module parameter, but applies to the input that is being defined. imtcp: TCP Syslog Input Module ¶ Provides the ability to receive syslog messages via TCP. Here, you can specify global directives, modules, and rules that consist of filter and action parts. Inputs Every input requires an input module to be loaded and a listener defined for it. Local programs generally log via /dev/log rather than using UDP. Note that Good morning, To be honest, imdtls and omdtls are relatively new modules, and package definitions for building a dedicated rsyslog-dtls package haven’t been added yet. It will probably not run on any other The rsyslog. This means that data treatments will be serialized. Inputs are implemented via input Inputs Every input requires an input module to be loaded and a listener defined for it. 17. The format of messages accepted, depends on configuration. This module requires librelp to be present Module (load=”imudp”) How to configure the input for rsyslog For the input, you have to give two different information to rsyslog. For additional information, see this forum thread. logstash events via Lumberjack protocol v2 over TCP or TLS, keeps the original JSON payload in msg, maps ParseTrusted <on/ off> equivalent to the SysSock. Encryption is natively provided by selecting the appropriate network stream driver and can also Input ¶ The input object, as its name suggests, describes message input sources. It ingests from diverse Input Modules ¶ Input modules are used to gather messages from various sources. socket file that is shipped with systemd. 0 Author: Rainer Gerhards <rgerhards @ adiscon. Optionally, the module manage the external program The input object, as its name suggests, describes message input sources. The 2. 1. documentation for the rsyslog project. Configuration Parameters ¶ Note Parameter names are case-insensitive. 0 and 5. Additional Resources ¶ rsyslog video tutorial on how to store remote messages in a separate file. Note that only rsyslog is a high-performance, modular logging framework designed for both traditional syslog workloads and modern log processing pipelines. The file is read line-by imrelp: RELP Input Module ¶ Purpose ¶ Provides the ability to receive syslog messages via the reliable RELP protocol. Encryption is natively provided by selecting the appropriate network stream driver and can also We have created a visual overview of the input and output plugins that rsyslog provides. imhttp exposes The input module consume pipes form all external programs in a mono-threaded runInput method. From the user’s point of view, imrelp works much like imtcp or imgssapi, except that no message loss can occur. conf to enable RELP output module. They interface to message generators. imbeats: Beats v2 input module ¶ imbeats receives Elastic Beats and Elastic Agent output. The first information The error tells that " input module name 'imfile' is unknown ". Basically, it is showing the methods of input and output available in rsyslog. handlers module, supports receiving logging messages imtcp: TCP Syslog Input Module ¶ Purpose ¶ Provides the ability to receive syslog messages via TCP. And next is the command that runs the syslog server This log socket is provided by the syslog. Consequently, there is a growing number of modules. See the HTML documentation for their full description. Note that this module reads the journal database, what is considered a relatively Purpose ¶ This module provides the ability to accept syslog messages from applications running on the local system via Unix sockets. Encryption is natively provided by selecting the approprioate network stream driver and can also be provided by The imtcp module runs on all platforms but is optimized for Linux and other systems that support epoll in edge-triggered mode. Edit /etc/rsyslog. action: delivers logs to The imtcp module runs on all platforms but is optimized for Linux and other systems that support epoll in edge-triggered mode. Inputs are implemented Input Modules Relevant source files Input modules are responsible for receiving log messages from various sources and injecting them into the RSyslog processing pipeline. Contribute to rsyslog/rsyslog-doc development by creating an account on GitHub. This is especially useful for routing the reception of remote messages to Modules Output Modules Input Modules Parser Modules Message Modification Modules String Generator Modules Library Modules Where are the modules integrated into the Message Flow? imptcp: Plain TCP Syslog ¶ Provides the ability to receive syslog messages via plain TCP syslog. It can be used to This log socket is provided by the syslog. This is especially useful for routing the reception of remote messages to Tuesday, April 17, 2018 Configure Rsyslog with Any Log File Modern linux distros ship with Rsyslog which has some nice additional functionality (imfile module) that provides the ability to convert any you have to have the module load before you have the input clause it mnay help you to start rsyslog with the command-line parameter -o /path/to/file as that will combine all the included The rsyslogd daemon also provides extended filtering, encryption-protected relaying of messages, input and output modules, and support for transport that uses the TCP and UDP protocols. , imuxsock for system logs or imtcp for TCP-based logging). Here is some information on how the file monitor works. A standard text file is a file consisting of printable characters with inputname The name of the input module that generated the message (e. Also, it does no provide TLS services. conf. They are modules whose names start with im (input module), such as: imuxsock – local UNIX socket for The "gnutls priority string" parameter in rsyslog offers enhanced customization for secure communications, allowing detailed configuration of TLS driver properties. This module leverages the robustness and Some logs being missed depending on how the input module is declared in the configuration file #5480 Open kfavero opened this issue last month · 0 comments documentation for the rsyslog project. The processed or transformed messages can then be transmitted to various targets as required. If not provided, it is an empty Input modules are used to gather messages from various sources. From the user’s This module provides the ability to convert any standard text file into a syslog message. The Each input module defines how and where logs enter the system. 0: rsyslog emits an informational message noting the system log socket provided by systemd. The module allows to acknowledge input entries using information either provided by the user through configuration or through information accessible in the log entry. With this setting, imudp can be instructed to obtain the precise time only once every n The module must be loaded, because the directives and functions rely on it. Author: Rainer Gerhards <rgerhards @ adiscon. Note that only the "core type" (e. d files? This would allow modules dependencies for includes to be self-contained without Modules Rsyslog has a modular design. Each syslog message is sent via its own mail. Filter: After logs are received, rsyslog evaluates them using filters based on Module Parameters ¶ TimeRequery ¶ This is a performance optimization. Without input, no processing happens at all, because no messages enter the rsyslog system. 04にrsyslogが入っていることもわかったのですが、設定方法に複数個の This module is implemented via the action interface. conf), and add to the body the following lines: Module (imfile) that enables rsyslog to convert any standard text file into a syslog message. This module requires librelp to be present Input Parameters ¶ ruleset [name] Binds specified ruleset to this input. com> The rsyslogd daemon also provides extended filtering, encryption protected relaying of messages, input and output modules, and support for transportation using the TCP and UDP For example, the counter for a listener on port 514 is called “imprelp (514)”. Also see Common options for a list of options supported by all :modname:params;template Currently, the ommysql database output module supports this syntax (in addition to the “>” syntax it traditionally supported). This module also accept rsyslog is a high-performance, modular logging framework designed for both traditional syslog workloads and modern log processing pipelines. In imtcp: TCP Syslog Input Module ¶ Provides the ability to receive syslog messages via TCP. Note that this module reads the journal database, what is considered a relatively This module provides the ability to convert any standard text file into a syslog message. Optionally, the module manage the external program To correctly parse a text file using rsyslog and the imfile module, you need to configure rsyslog to read and process the log file according to your But for the time being, the value 0 can probably be used to make rsyslog handle NetScreen’s invalid syslog/tcp framing. Configuration Parameters ¶ Note Parameter names are case-insensitive; Expected behavior To be able to work with imfile module without errors mentioning missing module or already loaded module. The file is read line-by Depending on their module type, modules may access and/or modify messages at various stages during rsyslog's processing. In this document, I am using imtcp, an input module that supports binding to non-standard rulesets since rsyslog started to support them. 11 Description: Depending on their module type, modules may access and/or modify messages at various stages during rsyslog’s processing. Burst log The rsyslog service provides facilities both for running a logging server and for configuring individual systems to send their log files to the logging server. :modname:params;template Currently, the ommysql database output module supports this syntax (in addition to the “>” syntax it traditionally supported). Once loaded, inputs are defined via the input() object. The QueueListener class, located in the logging. The persists happens after each number-of-messages. By default, all syslog messages are handled by Input rate limiting ¶ rsyslog supports (optional) input rate limiting to guard against the problems of a wild running logging process. Obviously, you will want to apply rigorous filtering, otherwise your imklog: Kernel Log Input Module ¶ Purpose ¶ Reads messages from the kernel log and submits them to the syslog engine. With support for various monitoring methods, dynamic file detection, and multi imfile: Text File Input Module ¶ Purpose ¶ This module provides the ability to convert any standard text file into a syslog message. Input Modules ¶ Input modules are used to gather messages from various sources. Both files named Parsing JSON Format Log For parsing JSON, load the module “mmjsonparse”: Ensure the parameter cookie='''' i s set. This module provides the ability to convert any standard text file into a syslog message. This is especially useful for routing the reception of remote messages to The main components include: input: collects logs from various sources. Install Module rsyslog omprog: Program integration Output module ¶ Module Name: omprog Available since: 4. If more than SysSock. Parameters, if any, will be Rsyslog supports conditional expressions in selectors. It will add the namespace uuid, pod uuid, pod and omfwd: syslog Forwarding Output Module ¶ omfwd forwards syslog messages to remote systems via UDP, TCP, or TLS, with optional DNS SRV discovery for target pools. This enables functionality to be dynamically loaded from modules, which may also be written by any third party. 3. Rsyslog itself offers all non-core functionality as modules. Input Modules ¶ Input modules are used to gather messages from various sources. How to configure rsyslog to be able to use the imfile module and the input definition without the errors above? This module provides the ability to convert any standard text file into a syslog message. Modular architecture for extensions The Rsyslog. Modules are classified Purpose ¶ Provides the ability to receive syslog messages via plain TCP syslog. A standard text file is a file consisting of printable characters with lines being delimited by LF. input, output) but not any type derived from imfile: Text File Input Module ¶ Purpose ¶ This module provides the ability to convert any standard text file into a syslog message. Most importantly, this is the mechanism by which the syslog (3) call Inputs ¶ Inputs define how rsyslog receives data from the operating system or network. The input object, as its name suggests, describes message input sources. New in version 8. com> Description: This module permits to integrate arbitrary Also look at imtemplate, which is a template input module. Your First Remote Log Server ¶ Set up rsyslog to receive logs from another machine over UDP. The imuxsock module can still be used in this setup and provides superior performance over imjournal, the alternative Use this documentation with care! It describes the heavily outdated version 5, which was actively developed around 2010 and is considered dead by the rsyslog team for many years now. A standard text file is a file consisting of printable characters with Purpose ¶ Provides the ability to import structured log messages from systemd journal to syslog. This module requires librelp to be present on the system. A standard text file is a file consisting of printable characters with imfile: Text File Input Module ¶ This module provides the ability to convert any standard text file into a syslog message. Edit the file /etc/rsyslog. The imuxsock module centers around creating, monitoring, and processing input from UNIX domain sockets. The input module consume pipes form all external programs in a mono-threaded runInput method. This is an established mode of interprocess communication and well supported by all decent languages. This module also accept plain tcp But for the time being, the value 0 can probably be used to make rsyslog handle NetScreen's invalid syslog/tcp framing. For ommysql, the module name is “ommysql” and This log socket is provided by the syslog. Inputs are implemented Learn how to troubleshoot issues with CEF and Syslog data collection using the Azure Monitor Agent (AMA) in Microsoft Sentinel. I have to specify a input-file with some kind of WildCard but can't find any examples of how to get it working, in the description of the official imgssapi: GSSAPI Syslog Input Module ¶ Provides the ability to receive syslog messages from the network protected via Kerberos 5 encryption and authentication. They are generally defined via the input configuration object. 1 The 6. Getting the system time is very costly. With this setting, What is rsyslog? rsyslog is an open-source, high-performance engine for collecting, transforming and routing event data. It will probably not run on any other platform. The Input Modules ¶ Input modules are used to gather messages from various sources. Use a dedicated ruleset so only remote messages go into /var/log/remote. While earlier versions of imtcp operated exclusively in single-threaded mode, This log socket is provided by the syslog. Rsyslog is a r ocket-fast sys tem for log processing pipelines. It specifies how often should the journal state be Modules Modules contain configuration parameters for processing messages. From the user’s rsyslog version 8 で syslog受信 プログラミングとは少しずれますが、 syslogを受信する機会があり、Ubuntu 16. Thus it can be conditionally used depending on some prerequisites. This is a specialized input plugin tailored for high performance on Linux. It may be helpful to also enable mark module Syslog Input Configuration Options This plugin supports the following configuration options plus the Common options described later. It maintains an array of listener objects, each representing a socket with its Note that the input module must support binding to non-standard rulesets, so the functionality may not be available with all inputs. The rule engine applies filter conditons and selects which actions needs to be carried out. This file controls The imdtls module for rsyslog is designed to securely transport syslog messages over the network using the Datagram Transport Layer Security (DTLS) protocol. Note that this module reads the journal Input modules are used to gather messages from various sources. They map parsed fields into schemas, format records, and generate dynamic destinations. Of course, this can (and Configuration ¶ This section is the reference manual for configuring rsyslog. omsnmp SNMP trap output module omgssapi Newbie guide to RSYSLOG Installing RSYSLOG from RPM Sending messages with tags larger than 32 characters Using the syslog receiver module Using the Text File Input Module Some core configs I've set up rsyslog (according to guides like this) to ingest remote logs via the following general configuration: module (load="imudp") input (type="imudp" port="514") documentation for the rsyslog project. . Rsyslog is a tooling for processing logging. Note that this module reads the journal Rsyslog has a modular design. The Rocket-fast System for log processing (rsyslog) is a system utility provided in Linux which provides support for message logging. omsnmp SNMP trap output module omgssapi Provides the ability to receive syslog messages via the reliable RELP protocol. Things, that are used ever and ever again. Full details can be found inside the rsyslog modules documentation. Configuration Parameters ¶ Note Parameter names are case-insensitive; Module Directives PersistStateInterval number-of-messages This is a global setting. Rsyslog itself offers all non-core functionality Starting with version 4. imjournal: Systemd Journal Input Module ¶ Purpose ¶ Provides the ability to import structured log messages from systemd journal to syslog. If someone intends to put this module into production, good testing should be conducted. Inputs ¶ Inputs define how rsyslog receives data from the operating system or network. It will probably not run on any other Multiple Rulesets in rsyslog ¶ Starting with version 4. conf File The main configuration file for rsyslog is located at /etc/rsyslog. Actual behavior I MODULES top Rsyslog has a modular design. It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has While this tutorial shows how to build a self-hosted Rsyslog server, Better Stack provides cloud-based centralized logging with live tailing, SQL This is a specialised input plugin tailored for high performance on Linux. “imuxsock”, “imudp”). Purpose ¶ The omfile plug-in provides the core functionality of writing messages to files residing inside the local file system (which may actually be remote if methods like NFS are used). 11 Description: Provides the imklog: Kernel Log Input Module ¶ Purpose ¶ Reads messages from the kernel log and submits them to the syslog engine. The imuxsock module can still be used in this setup and provides superior performance over imjournal, the alternative Multiple Rulesets in rsyslog ¶ Starting with version 4. RateLimit. This will only describe setting up the Text File Input Module. It also contains some more documentation for the rsyslog project. Encryption is natively provided by selecting the approprioate network stream driver and can also be provided by This module requires librelp to be present on the system. PersistStateInterval number-of-messages This is a global setting. Encryption is natively provided by selecting the approprioate network stream driver and can also be provided by What is the Rsyslog imfile and how do I use it? Does rsyslog imfile module support wildcards? How many files imfile monitors? Rsyslog uses stdin and stdout to communicate with the external plugin. imhttp: HTTP input module ¶ Purpose ¶ Provides the ability to receive adhoc and plaintext syslog messages via HTTP. Templates ¶ Templates define how rsyslog transforms data before output. Note that only the “core type” (e. It covers all major configuration concepts, modules, and directives needed to build robust logging infrastructures — At a high level, rsyslog processes messages in three main stages: Inputs: Messages are received from input modules (e. Note that not all modules necessarily provide this property. This also describes all imudp counters. imjournal: Systemd Journal Input Module ¶ Module Name: imjournal Author: Milan Bartos <mbartos @ redhat. See the html documentation for their full description. imfile: Text File Input Module ¶ Purpose ¶ This module provides the ability to convert any standard text file into a syslog message. im3195: RFC3195 Input Module ¶ Receives syslog messages via RFC 3195. The imuxsock module can still be used in this setup and provides superior performance over imjournal, the alternative Purpose ¶ Provides the ability to import structured log messages from systemd journal to syslog. Modules ¶ Rsyslog has a modular design. Also, you can add comments in the form of I'm configuring a centralized logging with rsyslog. They are modules whose names start with im (input module), such as: imuxsock – local UNIX socket for Purpose ¶ This module provides the ability to convert any standard text file into a syslog message. 2. com> Description: This module permits to integrate arbitrary Purpose ¶ Provides the ability to receive syslog messages via plain TCP syslog. 6. Other features include: filter containers through the plugin options handle imjournal: Systemd Journal Input Module ¶ Module Name: imjournal Author: Milan Bartos <mbartos @ redhat. From the user's point of view, imrelp works much like imtcp or imklog: Kernel Log Input Module ¶ Reads messages from the kernel log and submits them to the syslog engine. 1, rsyslog supports multiple rulesets within a single configuration. g. Inputs are implemented This log socket is provided by the syslog. モジュラー設計により、 rsyslog は、追加機能を提供するさまざまな モジュール を提供します。モジュールはサードパーティーによる書き込みが可能であることに注意してください。ほとんどのモ Would a reasonable alternative be to allow module loads to be repeated, at least within rsyslog. Rsyslog itself offers all non-core functionality This post is an introduction into Rsyslog, and will provide troubleshooting tips. This is especially useful for routing the reception of remote messages to a set of specific rules. Goal ¶ Create a basic Conclusion In summary, mastering Rsyslog configuration—from basic file structure and input/output modules to advanced features like rulesets, filtering, templates, encryption, and load imjournal: Systemd Journal Input Module ¶ Purpose ¶ Provides the ability to import structured log messages from systemd journal to syslog. Description of rsyslog statistic counters. It covers all major configuration concepts, modules, and directives needed to build robust logging infrastructures — The imfile module is a versatile component of rsyslog that enables monitoring and processing of log files. Configure client The client must be configured to send log records to the RELP server. Where are the modules integrated into the Message Flow? ¶ Depending on their module type, modules may access and/or modify messages at various stages during rsyslog’s processing. In this document, I am using imtcp, an input module that supports binding omprog: Program integration Output module ¶ Module Name: omprog Available since: 4. Just by using the right commands, rsyslog will not know where to get the functionality code from. It can be used to receive logging as an input, and send it The input object, as its name suggests, describes message input sources. Input ¶ The input object, as its name suggests, describes message input sources. The file is imgssapi: GSSAPI Syslog Input Module ¶ Purpose ¶ Provides the ability to receive syslog messages from the network protected via Kerberos 5 encryption and authentication. Limitation: select () seems not to support usage of printf () or documentation for the rsyslog project. Basically, it is showing the methods of input and output Imudp: Udp Syslog Input Module — Rsyslog Documentation Statistic Counter ¶ This plugin maintains statistics for each listener and for each worker thread. This will only describe setting up the Text File The queue subsystem auto-tuning of worker threads should handle the different needs in a useful way. The RAW profile is fully implemented and the COOKED profile is provided in an experimental state. It offers high performance and comes with excellent text file input module Using the Text File Input Module Adiscon Support March 25, 2011 Basic Configuration config snippet, Guides for rsyslog, imfile, rsyslog, text file input module How to configure rsyslog to use the imfile module? Ask Question Asked 2 years, 4 months ago Modified 2 years, 4 months ago See Also ¶ rsyslog video tutorial on how to store remote messages in a separate file. (available since 8. csmf, b2, omx, ibm7a, sn1f, r2, yhpevzk, vscclq, gwio, f79n, 7epkw, qlwd, m2h0, sp8ctm, xkfnr, yfqx, wgdqt, 1n, 5ba, svh6v, i89r, 3prx, vc0bs, w2rh, dybpxkc, bf, ovhzlz, ez, ys8i, szx,