log

bufferRollover

Table 1. bufferRollover properties

Property name

Value

Application name

log

Event name

bufferRollover

Default severity

informational

Message format string

Buffer buffer_name has been rolled over

Cause

The buffer has reached its configured max size, and log manager has rolled it over.

Effect

A new buffer has been opened for writing, and the old buffer has been archived. This may result in older buffers being removed from the system.

configUpdate

Table 2. configUpdate properties

Property name

Value

Application name

log

Event name

configUpdate

Default severity

informational

Message format string

Logging configuration updated

Cause

A configuration change has been made, resulting in rsyslogd configuration being regenerated.

Effect

Rsyslogd configuration has been modified, and the process has been restarted.

fileRollover

Table 3. fileRollover properties

Property name

Value

Application name

log

Event name

fileRollover

Default severity

informational

Message format string

File file_path/ file_name has been rolled over

Cause

The file has reached its configured max size, and log manager has rolled it over.

Effect

A new log file has been opened for writing, and the old log file has been archived. This may result in older logs being removed from the system.

networkNamespaceChanged

Table 4. networkNamespaceChanged properties

Property name

Value

Application name

log

Event name

networkNamespaceChanged

Default severity

informational

Message format string

Logging network namespace has changed from old_net_namespace to new_net_namespace

Cause

Configuration has been modified, resulting in the rsyslogd using the new network namespace to reach remote syslog servers.

Effect

Rsyslogd will use the new network namespace for reachability to remote syslog servers.

subsystemFacilityChanged

Table 5. subsystemFacilityChanged properties

Property name

Value

Application name

log

Event name

subsystemFacilityChanged

Default severity

informational

Message format string

Logging output facility has changed from old_facility to new_facility

Cause

Configuration has been modified, resulting in the output facility of our subsystems changing.

Effect

Subsystems will now output logs to the newly configured facility.