FAQ

• FAQ: some general topics often asked
  • FAQ: Message Duplication with rsyslog
• What is the difference between the main_queue and a queue with a ruleset tied to an input?
  • If an input bounded ruleset does not have a queue defined, what default does it have?
  • What is the recommended way to use several inputs? Should there be a need to define a queue for the rulesets?
• FAQ: Encrypting MySQL Traffic with ommysql Plugin
  • Question
  • Answer
  • Steps to Enable TLS
  • Additional Resources
• FAQ: Troubleshooting UDP Packet Loss
  • Q1: I see packet loss in my OS statistics for imudp. What are the potential causes, troubleshooting steps, and probable fixes?
  • Q2: How can I definitively check if the OS kernel is dropping UDP packets due to full receive buffers?
  • Q3: Why does tcpdump show traffic as “ip-proto-17” without a port number?
  • Q4: My OS stats show “packets to unknown port”. How do I find out which port is being used?
  • Q5: How does rsyslog set the UDP receive buffer? Does it use SO_RCVBUFFORCE?
• Common Configuration Mistakes and Misunderstandings
• Why do I see gibberish when connecting with TLS?
  • Description
  • Detection strategy
  • Resolution
  • Notes
  • See also

---

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.