It is getting pretty strange. I reducated the config as you suggested
(attached), but PF delta is nearly constant 384. I added I/O Read Delta
column to process manager and Read Bytes are also on constant level
1 565 856 B/s.
I made a strace on nxlog with sysinternal's ProcessMonitor, and didn't
noticed any extra file/registry access.
the only file which nxlog reads directly in runtime is pfirewall.log.
it does not grow at 1.5 MB/s.
can you explain it?

--
Hrubák András

On Mon, 9 Sep 2013 18:34:05 +0200
Botond Botyanszki <b...@nxlog.org> wrote:

> Hi,
> 
> I suggest to refactor your config a little, possibly trying to eliminate
> processor modules.
> The syslogizer processor module is redundant, to_syslog_bsd() does
> the same thing in noacute, so I think syslogizer can be removed.
> I suggest adding "Exec yo_syslog_bsd();" to your rsyslog output and
> moving the rest of the character code conversion in noacute to your
> msevent input as other input modules most likely don't generate accented
> characters. 
> This way you can eliminate processor modules.
> 
> Currently I'm not sure why there are so many page faults, though I
> suspect this is related to threading. Reducing the number of modules also
> reduces the number of threads. Let me know how this affects the page
> fault count.
> 
> Regards,
> Botond
> 
> 
> On Mon, 9 Sep 2013 06:48:28 +0200
> bandie91 <bandi...@gmail.com> wrote:
> 
> > I use nxlog 2.1 for windows, configuration attached.
> > I also attached a screenshot of process performance table,
> > You can notice nxlog generates much more Page Faults
> > as other processes and as it would be normal in my opinion.
> > See columns 4th (Page Faults in last 1 sec) and 5th (Page 
> > Faults alltime)
> > Picture made at 6:30, so runtime was 44 min.
> > Why does nxlog generates so many PF, how can I trace and
> > how could it be reduced?
> > 
> > 
> > some useful memory info:
> > 
> > 53% Memory utilization
> > Total physical memory:          523,632 Kb
> > Phys. memory available:         242,316 Kb
> > Page file size:               1,278,432 Kb
> > Available in page file:       1,052,280 Kb
> > Virtual Memory size:          2,097,024 Kb
> > Free Virtual Memory:          2,083,788 Kb
> > Page size:                        4,096 bytes
> > Minimum Appl. Address:       0x00010000
> > Maximum Appl. Address:       0x7ffeffff
> > Number of processors:                 1
> > Allocation Granularity:          65,536 bytes
> > Processor: Intel  1398 MHz Pentium Family 6 Model 9 Stepping 5
> > 
> > -- 
> > Hrubák András
> 
> ------------------------------------------------------------------------------
> Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
> Discover the easy way to master current and previous Microsoft technologies
> and advance your career. Get an incredible 1,500+ hours of step-by-step
> tutorial videos with LearnDevNow. Subscribe today and save!
> http://pubads.g.doubleclick.net/gampad/clk?id=58041391&iu=/4140/ostg.clktrk
> _______________________________________________
> nxlog-ce-users mailing list
> nxlog-ce-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users

Attachment: nxlog.conf
Description: Binary data

------------------------------------------------------------------------------
How ServiceNow helps IT people transform IT departments:
1. Consolidate legacy IT systems to a single system of record for IT
2. Standardize and globalize service processes across IT
3. Implement zero-touch automation to replace manual, redundant tasks
http://pubads.g.doubleclick.net/gampad/clk?id=51271111&iu=/4140/ostg.clktrk
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users

Reply via email to