Here is a workaroudn for this issue, for rsyslog
On the rudder policy server, in /var/rudder/configuration-repository/techniques/system/common/1.0/promises.st, replace
!windows.rsyslogd.!policy_server::
"/etc/rsyslog.d/rudder-agent.conf"
edit_line => append_if_no_lines("#Rudder log system${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then @@${server_info.cfserved}:&SYSLOGPORT&${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then ~"),
create => "true",
edit_defaults => empty_backup,
classes => kept_if_else("rsyslog_kept", "rsyslog_repaired" , "rsyslog_failed");
by
!windows.rsyslogd.!policy_server::
"/etc/rsyslog.d/rudder-agent.conf"
edit_line => append_if_no_lines("#Rudder log system${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then @${server_info.cfserved}:&SYSLOGPORT&${const.n}if $syslogfacility-text == 'local6' and $programname startswith 'rudder' then ~"),
create => "true",
edit_defaults => empty_backup,
classes => kept_if_else("rsyslog_kept", "rsyslog_repaired" , "rsyslog_failed");
then execute, in the folder /var/rudder/configuration-repository/techniques/system/common/1.0/, the following commands:
git add promises.st
git commit -m "Use UDP rather than TCP for rsyslog"
and then, in the web interface, go to administration page, and click on "Update technique now".
If you are not using rsyslog, please tell me so that I can offer another workaround