Rsyslog questions

RiverMuse Core 4.1.7

How do I disable DNS lookup?

Everytime Rsyslog receives a packet, Rsyslog will attempt to reverse DNS lookup the sending address. This will cause an issue on a network with a broken or slow DNS. You can disable the DNS lookup by editing /etc/sysconfig/rsyslog to include the -x flag:

How do I increase the UDP buffer size?

When a large stream of data is being thrown at Rsyslog via UDP, and the UDP buffer becomes full, some packets can get dropped. To increase the UDP buffer size edit /etc/sysctl.conf:

For further information on UDP buffer size refer to http://www.29west.com/docs/THPM/udp-buffer-sizing.html.

How do I disable the discarding messages functionality?

To prevent Rsyslog discarding messages when they fill up all the queues, edit /etc/rsyslog.conf as follows: