rsyslog error 2359

Status: action was resumed (used for reporting).

This means a previously suspended action has recovered. Recovery happens e.g. when the action can reconnect to a server or some resource starvation is solved. This is an informational message telling you rsyslog now executes the action again.

Note: due to a bug in old rsyslog versions (e.g. 8.24.0) an “action was suspended” message is not necessarily reported. Thus the resumption message may be the only way to detect something went wrong. Version 8.1904.0 and above will much more reliably report action suspension.

If you have questions please post a comment or visit the github issue tracker.

rsyslog error 2354

Sending msg via UDP failed.

This may have several causes. To differentiate between them, the OS error code (so-called “errno”) and the OS error description is given. Note that rsyslog does not know more about the error cause than shown in its message.

An example is (OS parts in red):

rsyslogd: omfwd: error 11 sending via udp: Resource temporarily unavailable

The message above most probably indicates that the system is out of UDP buffer space. But it may have different causes (e.g. out of sockets). If you can’t find an easy solution, you need to monitor your system.

Note that old versions (like 8.24) always failed to send messages close to or larger than 64KiB.

If you have questions please post a comment or visit the github issue tracker.

Scroll to top