On Feb 19, 2013, at 8:16 AM, Nelson Green <nelsongreen84 at hotmail.com> wrote: > I can change things around so that tcp is used instead of RELP, and everything > works that way. The problem is specific to using RELP in the normal background > mode. I also tested the above RELP configuration on two Debian Wheezy boxes, > each running rsyslog v5.8.11, and everything worked as expected. So the problem > seems to be specific to CentOS with RELP. Haven't tried it, but smells like selinux messing with you. Could also be a permissions problem on opening the port. What specifically is TCP not capable of that RELP is? Just curious... looked at their webpage and it claims it's "reliable" but most of the internet hasn't found TCP to be very unreliable for decades...? (Reinventing the wheel?)