<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hello,</p>
    <p>typically syslog has some rate limiting, and with centos, you get
      extra limits with selinux. You have to dive into rsyslog, system
      config and selinux.</p>
    <p>What you can do is to start with log_stderror=yes (or -E command
      line option) and see if it is printing the messages you are
      looking for to the terminal. You can eventually direct sderror to
      a file to be easier to search/match...</p>
    <p>Cheers,<br>
      Daniel<br>
    </p>
    <div class="moz-cite-prefix">On 04.12.18 10:40, Soltanici Ilie
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:1543916406.551735647@f221.i.mail.ru">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      Hello,<br>
      <br>
      Actually, async Syslog option was the initial option which I tried
      - it wasn't working properly so I changed to a synchronous mode in
      the hope that it will work better, but unfortunately it didn't.<br>
      <br>
      <blockquote style="border-left:1px solid #0857A6; margin:10px;
        padding:0 0 0 10px;">Daniel-Constantin Mierla
        <a class="moz-txt-link-rfc2396E" href="mailto:miconda@gmail.com"><miconda@gmail.com></a>:<br>
        <br>
        <div id="">
          <div class="js-helper js-readmsg-msg">
            <style type="text/css"></style>
            <div> <base target="_self" href="https://e.mail.ru/">
              <div id="style_15439131560000000534_BODY">
                <div class="class_1543945639">
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix">Hello,</div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix"><br>
                  </div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix">try
                    with async syslogging option in rsyslog config: add
                    a - in front of the file name, like:</div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix"><br>
                  </div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix">local0.* 
                               -/var/log/kamailio/kamailio.log</div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix"><br>
                  </div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix">See
                    if the results are better.</div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix"><br>
                  </div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix">Cheers,<br>
                    Daniel<br>
                  </div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix"><br>
                  </div>
                  <div
                    class="moz-cite-prefix_mailru_css_attribute_postfix">On
                    02.12.18 16:14, Soltanici Ilie wrote:<br>
                  </div>
                  <blockquote type="cite"
                    cite="mid:1543763691.810364619@f105.i.mail.ru">
                    <p>Hello,<br>
                      <br>
                      I have a strange situation by using xlog module. I
                      don't know for what reason I'm not receiving all
                      logs generated by kamailio.<br>
                      <br>
                      This is the configuration which I'm using in
                      kamailio.cfg:<br>
                      <br>
                    </p>
                    <p>log_facility=LOG_LOCAL0<br>
                      log_name="kamailio"<br>
                      log_prefix="{$rm ($mt) | Seq=$cs | Source IP=$si
                      ($proto) | Call ID=$ci} "</p>
                    <p># ----- xlog -----<br>
                      modparam("xlog", "buf_size", 8192)<br>
                      modparam("xlog", "long_format", 0)<br>
                      modparam("xlog", "force_color", 1)<br>
                      modparam("xlog", "log_colors",
                      "L_ERR=cr;L_WARN=px,L_INFO=px")<br>
                      <br>
                      This is rsyslog configuration file:<br>
                      local0.*           
                       /var/log/kamailio/kamailio.log<br>
                      <br>
                      Kamailio is running under kamailio user,
                      permission for the log file are as shown below:<br>
                      -rwxrwxr-x 1 kamailio kamailio 252885132 Dec  2
                      14:51 /var/log/kamailio/kamailio.log<br>
                      <br>
                      In request_route block this is the first line:<br>
                      <br>
                      xlog("L_INFO","[START ROUTING]-(Source
                      IP=$si:$sp/Destination IP=$Ri:$Rp)\n");<br>
                      <br>
                      The problem is that not every request is logged in
                      the log-file. For example, some "INVITES" requests
                      I can find in the log file, but some of them - I
                      cannot, even that in sngrep I see the request and
                      the call is successfully processed by kamailio.
                      Also, for some requests i can see only partial
                      data, not full call-flow as it supposed to be (for
                      ex. i see only BYE requests, or ACK response
                      instead of full call flow). <br>
                      <br>
                      Does someone have the same issue? If you don't -
                      how are you dealing with kamailio log files? I'm
                      thinking to send them to the central ELK stack,
                      but if I have such problems by saving them locally
                      - I don't see any reason to send them elsewhere.<br>
                      I may think that the problem could be in
                      rsyslog itself, but how can I troubleshoot that?<br>
                      <br>
                      The traffic on the server is not very high - 30-50
                      concurrent calls. As a storage i'm using an SSD
                      disk and xfs filesystem. Load on the disk -
                      according to iostat/iotop - is minimum. <br>
                      <br>
                      OS: CentOS Linux 7 (Core), Kamailio: 5.2.0
                      (x86_64/linux) 535e13<br>
                      Thank You.</p>
                    <br>
                    <fieldset
                      class="mimeAttachmentHeader_mailru_css_attribute_postfix"></fieldset>
                    <pre class="moz-quote-pre_mailru_css_attribute_postfix" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated_mailru_css_attribute_postfix" href="//e.mail.ru/compose/?mailto=mailto%3asr%2dusers@lists.kamailio.org" target="_blank" rel=" noopener noreferrer" moz-do-not-send="true">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext_mailru_css_attribute_postfix" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" target="_blank" rel=" noopener noreferrer" moz-do-not-send="true">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
                  </blockquote>
                  <p><br>
                  </p>
                  <pre class="moz-signature_mailru_css_attribute_postfix" cols="72">-- 
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated_mailru_css_attribute_postfix" href="http://www.asipto.com" target="_blank" rel=" noopener noreferrer" moz-do-not-send="true">www.asipto.com</a>
<a class="moz-txt-link-abbreviated_mailru_css_attribute_postfix" href="http://www.twitter.com/miconda" target="_blank" rel=" noopener noreferrer" moz-do-not-send="true">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated_mailru_css_attribute_postfix" href="http://www.linkedin.com/in/miconda" target="_blank" rel=" noopener noreferrer" moz-do-not-send="true">www.linkedin.com/in/miconda</a>
Kamailio World Conference -- <a class="moz-txt-link-abbreviated_mailru_css_attribute_postfix" href="http://www.kamailioworld.com" target="_blank" rel=" noopener noreferrer" moz-do-not-send="true">www.kamailioworld.com</a>
Kamailio Advanced Training, Nov 12-14, 2018, in Berlin -- <a class="moz-txt-link-abbreviated_mailru_css_attribute_postfix" href="http://www.asipto.com" target="_blank" rel=" noopener noreferrer" moz-do-not-send="true">www.asipto.com</a></pre>
                </div>
              </div>
            </div>
          </div>
        </div>
      </blockquote>
    </blockquote>
    <pre class="moz-signature" cols="72">-- 
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio World Conference -- <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a>
Kamailio Advanced Training, Nov 12-14, 2018, in Berlin -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a></pre>
  </body>
</html>