Quiz: logs from many machines

Question 1 of 10

Forwarding with @ and @@, rsyslogd -N1, the imtcp and imudp inputs, a template with %HOSTNAME%, nginx's access.log and error.log, journalctl -o json with jq and kernel messages on one timeline. The questions follow the lessons “Logs in one place” and “Investigating with logs”.

10 questions · threshold 70%

One correct answer

A machine has the rule `. @10.0.0.5:514` in /etc/rsyslog.d/90-forward.conf, and the 10.0.0.5 collector only accepts TCP. What happens to the machine's lines?

They will pile up in a queue and go out when the collector opens UDP.
rsyslog will not start — the rule's protocol does not match the reception.
They will vanish without a trace — neither rsyslog nor the collector will log an error.
They will arrive — rsyslog will switch to TCP when UDP does not answer.

A–D or ↵ Sign in to answer

Quiz: logs from many machines

A machine has the rule *.* @10.0.0.5:514 in /etc/rsyslog.d/90-forward.conf, and the 10.0.0.5 collector only accepts TCP. What happens to the machine's lines?

A machine has the rule `. @10.0.0.5:514` in /etc/rsyslog.d/90-forward.conf, and the 10.0.0.5 collector only accepts TCP. What happens to the machine's lines?