On Sat, Oct 15, 2011 at 09:33:56AM -0400, John Marrett wrote: > Willy, > > >For high loads, I strongly recommend syslog-ng. It's the only one I > >found which managed to log more than 10000 logs/s without dropping > >any : > > > > http://www.balabit.com/network-security/syslog-ng > > > Have you tested rsyslog? I've had bad experiences with syslog-ng > dropping messages in the past, though the logging configuration was > fairly complex.
Yes I've already tested rsyslog and was not convinced at all, although several people reported good results. It offers nice features but its config is quite cryptic to me so I tend not to use it. > It was at least able to report how many messages had been dropped. This is quite important. That's why I want to add a log ID to haproy, so that it becomes obvious what log is missing. Regards, Willy
