rsyslog is getting failed

[abhijeet4022]

Expected behavior

Actual behavior

Steps to reproduce the behavior

Environment

• rsyslog version:
• platform:
• for configuration questions/issues, include rsyslog.conf and included config files

[abhijeet4022]

My rsyslog is getting failed please help me on this

[davidelang]

we need information to help, please provide the configuration as the template requested

note that 8.24 is a redhat fork of rsyslog from 5+ years ago, if it's a simple config issue we can probably help, if it's something deeper, you will have to contact redhat or upgrade to a more current version that the community can support.

[abhijeet4022]

It's working for now after modify the configuration thanks

[abhijeet4022]

I am getting now drop message due to rate limit pls help me on this

[abhijeet4022]

@davidelang Please help me on this Above

[abhijeet4022]

rsyslog_Conf.txt

[abhijeet4022]

I have attach the rsyslog file also @davidelang

[davidelang]

That's not your full config, so I don't know which action is action 27, but in what you show you do have

. @@ loghost.example.com

if that's really in there and uncommented, that is going to fail because loghost.example.com is not a valid destination.

if that's a dummy address, then it could be that whatever you are sending the logs to isn't keeping up.

[abhijeet4022]

That is dummy and expected one we are sending the logs to azure sentinel

[abhijeet4022]

Ok I will the complete configuration file

[davidelang]

is that action 27 that it's complaining about? if so, having action 27 suspend just means that the system you are sending to isn't keeping up, so you are pausing sending logs until it will accept more. David Lang On Sat, 4 May 2024, Abhijeet Pramanik wrote:

…

Date: Sat, 04 May 2024 08:22:01 -0700 From: Abhijeet Pramanik ***@***.***> Reply-To: rsyslog/rsyslog ***@***.***> To: rsyslog/rsyslog ***@***.***> Cc: David Lang ***@***.***>, Mention ***@***.***> Subject: Re: [rsyslog/rsyslog] rsyslog is getting failed (Issue #5373) That is dummy and expected one we are sending the logs to azure sentinel

[abhijeet4022]

21-cloudinit.txt
95-omsagent.txt
listen.txt
rsyslog.txt

[abhijeet4022]

@davidelang please have a look I have posted all config file along with the rsyslog status SS.

[abhijeet4022]

@davidelang This is our production server where we getting error. And we are not receiving the logs in Azure Sentinel.