-
Notifications
You must be signed in to change notification settings - Fork 21
Open
Description
I have two sources i.e. syslog and http. and I want both of these logs to be outputted to mdsd. I tried multiple options to make it work but even if it works in some cases, there is flood of logs in /var/log/td-agent/td-agent.log :
unexpected mdsd ack status: ACK_INVALID_SOURCE
Options tried :
<match>without any tag : this works but logs flood with ACK_INVALID_SOURCE<match {gheslog.**,ifx.**}>: does not work- Two mdsd plugin i.e.
<match ifx.**> and <match gheslog.**>: works but logs flood with ACK_INVALID_SOURCE
Below is my fluentd conf :
<source>
type syslog
port 25827
bind 0.0.0.0
protocol_type tcp
tag gheslog
</source>
<source>
@type http
port 8900
bind 0.0.0.0
body_size_limit 32m
keepalive_timeout 10s ## This source has tag pattern ifx.**
</source>
<match>
@type mdsd
djsonsocket /var/run/mdsd/default_djson.socket
acktimeoutms 5000 # milli-seconds
num_threads 4
buffer_chunk_limit 2M
buffer_type file
buffer_path /var/log/td-agent/state/mdsd_ifx.buffer
buffer_queue_limit 128
flush_interval 1s
retry_limit 10
retry_wait 10s
</match>
PS : If I just use single <match > with any of these two tags i.e. sending only one source data to mdsd, it works perfectly without any error message.
Metadata
Metadata
Assignees
Labels
No labels