From 00ce1a8a269d872dd05e33722d015fc090a1683a Mon Sep 17 00:00:00 2001
From: Ryan Cavicchioni <ryan@cavi.cc>
Date: Sun, 14 Apr 2024 18:10:35 -0500
Subject: [PATCH] Tweak rsyslog queuing

---
 group_vars/all/main.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/group_vars/all/main.yaml b/group_vars/all/main.yaml
index e54825b..4f7e5c8 100644
--- a/group_vars/all/main.yaml
+++ b/group_vars/all/main.yaml
@@ -107,10 +107,12 @@ rsyslog_outputs:
       protocol: tcp
       action.resumeretrycount: -1
       queue.type: linkedlist
-      queue.size: 10000
+      queue.size: 1000000
       queue.filename: fwd
       queue.saveonshutdown: "on"
       keepalive: "on"
+      template: RSYSLOG_SyslogProtocol23Format
+      tcp_framing: octet-counted
 
 sudo_aliases:
   host: