Concepts

This chapter describes important rsyslog concepts and objects. Where appropriate, it also refers to configurations settings to affect the respective objects.

• Understanding rsyslog Queues
  • Where are Queues Used?
  • Queue Modes
  • Limiting the Queue Size
  • Worker Thread Pools
  • Filled-Up Queues
• The Janitor Process
• Message parsers in rsyslog
  • Intro
  • What are message parsers?
  • How are message parsers used?
  • Which message parsers are available
  • Conclusion
• Multiple Rulesets in rsyslog
  • What is a Ruleset?
  • What does “To bind to a Ruleset” mean?
  • Why are rulesets important for different parser configurations?
  • Can I use a different Ruleset as the default?
  • Rulesets and Queues
  • Examples
  • Performance
  • See Also
• NetStream Drivers
  • Current Network Stream Drivers