rsyslog buffer

hdparm -z /dev/sdb
pvresize /dev/sdb
lvcreate v1 -n rsyslog -l+100%free
mkfs.xfs /dev/v1/rsyslog
mount /dev/v1/rsyslog /var/lib/rsyslog
tail -1 /etc/mtab >>/etc/fstab

rpm -e --nodeps rsyslog; yum -y install rsyslog7
mv /etc/rsyslog.conf.rpmsave /etc/rsyslog.conf
/etc/init.d/rsyslog start

# CheatSheet
http://fibrevillage.com/sysadmin/221-rsyslog-rules-examples-on-linux