I'm using rsyslog
to forward syslog entries from a pile of servers to Loggly
The configuration looks something like this:
# Config for loggly upload
*.* @@logs.loggly.com:12345
This works, but because it's forwarding, any log entries which occur when there isn't an internet connection never make it to loggly.
Is there anyway I can configure rsyslog to "hold" log entries until an internet connection is established, and then send them? Or is there another tool I should be using for this?