************************ imptcp: Plain TCP Syslog ************************ =========================== =========================================================================== **Module Name:**  **imptcp** **Author:** `Rainer Gerhards `_ =========================== =========================================================================== Purpose ======= Provides the ability to receive syslog messages via plain TCP syslog. This is a specialized input plugin tailored for high performance on Linux. It will probably not run on any other platform. Also, it does not provide TLS services. Encryption can be provided by using `stunnel `_. This module has no limit on the number of listeners and sessions that can be used. .. note:: Reverse DNS lookups for remote senders are cached. Set the TTL via :ref:`reverse_dns_cache`. Notable Features ================ - :ref:`imptcp-statistic-counter` - :ref:`error-messages` Configuration Parameters ======================== .. note:: Parameter names are case-insensitive; camelCase is recommended for readability. Module Parameters ----------------- .. list-table:: :widths: 30 70 :header-rows: 1 * - Parameter - Summary * - :ref:`param-imptcp-threads` - .. include:: ../../reference/parameters/imptcp-threads.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-maxsessions` - .. include:: ../../reference/parameters/imptcp-maxsessions.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-processonpoller` - .. include:: ../../reference/parameters/imptcp-processonpoller.rst :start-after: .. summary-start :end-before: .. summary-end Input Parameters ---------------- These parameters can be used with the "input()" statement. They apply to the input they are specified with. .. list-table:: :widths: 30 70 :header-rows: 1 * - Parameter - Summary * - :ref:`param-imptcp-port` - .. include:: ../../reference/parameters/imptcp-port.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-path` - .. include:: ../../reference/parameters/imptcp-path.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-discardtruncatedmsg` - .. include:: ../../reference/parameters/imptcp-discardtruncatedmsg.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-fileowner` - .. include:: ../../reference/parameters/imptcp-fileowner.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-fileownernum` - .. include:: ../../reference/parameters/imptcp-fileownernum.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-filegroup` - .. include:: ../../reference/parameters/imptcp-filegroup.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-filegroupnum` - .. include:: ../../reference/parameters/imptcp-filegroupnum.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-filecreatemode` - .. include:: ../../reference/parameters/imptcp-filecreatemode.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-failonchownfailure` - .. include:: ../../reference/parameters/imptcp-failonchownfailure.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-unlink` - .. include:: ../../reference/parameters/imptcp-unlink.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-name` - .. include:: ../../reference/parameters/imptcp-name.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-ruleset` - .. include:: ../../reference/parameters/imptcp-ruleset.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-maxframesize` - .. include:: ../../reference/parameters/imptcp-maxframesize.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-maxsessions` - .. include:: ../../reference/parameters/imptcp-maxsessions.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-address` - .. include:: ../../reference/parameters/imptcp-address.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-addtlframedelimiter` - .. include:: ../../reference/parameters/imptcp-addtlframedelimiter.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-supportoctetcountedframing` - .. include:: ../../reference/parameters/imptcp-supportoctetcountedframing.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-notifyonconnectionclose` - .. include:: ../../reference/parameters/imptcp-notifyonconnectionclose.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-notifyonconnectionopen` - .. include:: ../../reference/parameters/imptcp-notifyonconnectionopen.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-keepalive` - .. include:: ../../reference/parameters/imptcp-keepalive.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-keepalive-probes` - .. include:: ../../reference/parameters/imptcp-keepalive-probes.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-keepalive-interval` - .. include:: ../../reference/parameters/imptcp-keepalive-interval.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-keepalive-time` - .. include:: ../../reference/parameters/imptcp-keepalive-time.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-ratelimit-name` - .. include:: ../../reference/parameters/imptcp-ratelimit-name.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-ratelimit-interval` - .. include:: ../../reference/parameters/imptcp-ratelimit-interval.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-ratelimit-burst` - .. include:: ../../reference/parameters/imptcp-ratelimit-burst.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-compression-mode` - .. include:: ../../reference/parameters/imptcp-compression-mode.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-flowcontrol` - .. include:: ../../reference/parameters/imptcp-flowcontrol.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-multiline` - .. include:: ../../reference/parameters/imptcp-multiline.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-framing-delimiter-regex` - .. include:: ../../reference/parameters/imptcp-framing-delimiter-regex.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-socketbacklog` - .. include:: ../../reference/parameters/imptcp-socketbacklog.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-defaulttz` - .. include:: ../../reference/parameters/imptcp-defaulttz.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-framingfix-cisco-asa` - .. include:: ../../reference/parameters/imptcp-framingfix-cisco-asa.rst :start-after: .. summary-start :end-before: .. summary-end * - :ref:`param-imptcp-listenportfilename` - .. include:: ../../reference/parameters/imptcp-listenportfilename.rst :start-after: .. summary-start :end-before: .. summary-end .. _imptcp-statistic-counter: Statistic Counter ================= This plugin maintains :doc:`statistics <../rsyslog_statistic_counter>` for each listener. The statistic is named "imtcp" , followed by the bound address, listener port and IP version in parenthesis. For example, the counter for a listener on port 514, bound to all interfaces and listening on IPv6 is called "imptcp(\*/514/IPv6)". The following properties are maintained for each listener: - **submitted** - total number of messages submitted for processing since startup .. _error-messages: Error Messages ============== When a message is to long it will be truncated and an error will show the remaining length of the message and the beginning of it. It will be easier to comprehend the truncation. Caveats/Known Bugs ================== - module always binds to all interfaces Examples ======== Example 1 --------- This sets up a TCP server on port 514: .. code-block:: none module(load="imptcp") # needs to be done just once input(type="imptcp" port="514") Example 2 --------- This creates a listener that listens on the local loopback interface, only. .. code-block:: none module(load="imptcp") # needs to be done just once input(type="imptcp" port="514" address="127.0.0.1") Example 3 --------- Create a unix domain socket: .. code-block:: none module(load="imptcp") # needs to be done just once input(type="imptcp" path="/tmp/unix.sock" unlink="on") .. toctree:: :hidden: ../../reference/parameters/imptcp-threads ../../reference/parameters/imptcp-maxsessions ../../reference/parameters/imptcp-processonpoller ../../reference/parameters/imptcp-port ../../reference/parameters/imptcp-path ../../reference/parameters/imptcp-discardtruncatedmsg ../../reference/parameters/imptcp-fileowner ../../reference/parameters/imptcp-fileownernum ../../reference/parameters/imptcp-filegroup ../../reference/parameters/imptcp-filegroupnum ../../reference/parameters/imptcp-filecreatemode ../../reference/parameters/imptcp-failonchownfailure ../../reference/parameters/imptcp-unlink ../../reference/parameters/imptcp-name ../../reference/parameters/imptcp-ruleset ../../reference/parameters/imptcp-maxframesize ../../reference/parameters/imptcp-address ../../reference/parameters/imptcp-addtlframedelimiter ../../reference/parameters/imptcp-supportoctetcountedframing ../../reference/parameters/imptcp-notifyonconnectionclose ../../reference/parameters/imptcp-notifyonconnectionopen ../../reference/parameters/imptcp-keepalive ../../reference/parameters/imptcp-keepalive-probes ../../reference/parameters/imptcp-keepalive-interval ../../reference/parameters/imptcp-keepalive-time ../../reference/parameters/imptcp-ratelimit-name ../../reference/parameters/imptcp-ratelimit-interval ../../reference/parameters/imptcp-ratelimit-burst ../../reference/parameters/imptcp-compression-mode ../../reference/parameters/imptcp-flowcontrol ../../reference/parameters/imptcp-multiline ../../reference/parameters/imptcp-framing-delimiter-regex ../../reference/parameters/imptcp-socketbacklog ../../reference/parameters/imptcp-defaulttz ../../reference/parameters/imptcp-framingfix-cisco-asa ../../reference/parameters/imptcp-listenportfilename