Rsyslog version: 8.4.2 Queue type: Disk assisted Memory Queue Almost 380 servers send several OS and application logs to the log aggregation server in my case. Error on one of the servers: rsyslogd-2026: error starting up disk queue, using pure in-memory mode NOTE: This is not happening on all servers. Configuration: $WorkDirectory /var/lib/rsyslog # where to place spool files $ActionQueueFileName SIEMForward # unique name prefix for spool files $ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible) $ActionQueueSaveOnShutdown on # save messages to disk on shutdown $ActionQueueType LinkedList # run asynchronously $ActionResumeRetryCount -1 # infinite retries if host is down authpriv.*,local2.*,local4.*,local5.*,local6.*,local7.*,cron.*,*.info,mail.*,uucp,news.crit @@xxxxxx-AGG-SERVER:10514 Could someone please help me resolve this issue. Thanks in advance.
