-
Notifications
You must be signed in to change notification settings - Fork 21
Open
Description
I have two sources i.e. syslog and http. and I want both of these logs to be outputted to mdsd. I tried multiple options to make it work but even if it works in some cases, there is flood of logs in /var/log/td-agent/td-agent.log :
unexpected mdsd ack status: ACK_INVALID_SOURCE
Options tried :
<match>without any tag : this works but logs flood with ACK_INVALID_SOURCE<match {gheslog.**,ifx.**}>: does not work- Two mdsd plugin i.e.
<match ifx.**> and <match gheslog.**>: works but logs flood with ACK_INVALID_SOURCE
Below is my fluentd conf :
<source>
type syslog
port 25827
bind 0.0.0.0
protocol_type tcp
tag gheslog
</source>
<source>
@type http
port 8900
bind 0.0.0.0
body_size_limit 32m
keepalive_timeout 10s ## This source has tag pattern ifx.**
</source>
<match>
@type mdsd
djsonsocket /var/run/mdsd/default_djson.socket
acktimeoutms 5000 # milli-seconds
num_threads 4
buffer_chunk_limit 2M
buffer_type file
buffer_path /var/log/td-agent/state/mdsd_ifx.buffer
buffer_queue_limit 128
flush_interval 1s
retry_limit 10
retry_wait 10s
</match>
PS : If I just use single <match > with any of these two tags i.e. sending only one source data to mdsd, it works perfectly without any error message.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels