On Mon, 20 Sep 2010, Joe Williams wrote:
David,
Thanks for the info.
what does your environment look like? how many messages of what size do you
expect to receive, and what do you want to do with them?
I was running v3 until a few hours ago, now that I am on v5 I doubt I am
hitting any performance issues from your estimations. I would say that I
have a good mix of message sizes, I ran into the size limit in v3 and
adjusted syslogd.h (4k) to get around it. We have stack traces that can
be very long. As far as rate I am attempting to determine that, we
produce around 50GB of uncompressed logs a day, much of it web server
access logs. Similarly I use UDP exclusively.
50G per day with UDP should be pretty easy to do.
make sure you aren't doing DNS lookups and set the time lookups to 10 or
so and you are probably in very good shape.
David Lang
-Joe
Thanks.
-Joe
http://mperedim.wordpress.com/2010/01/21/rsyslog-evaluation/
http://www.rsyslog.com/doc/queues.html
http://www.rsyslog.com/doc/rsyslog_high_database_rate.html
http://www.gossamer-threads.com/lists/rsyslog/users/4029
Name: Joseph A. Williams
Email: [email protected]
Blog: http://www.joeandmotorboat.com/
Twitter: http://twitter.com/williamsjoe
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
Name: Joseph A. Williams
Email: [email protected]
Blog: http://www.joeandmotorboat.com/
Twitter: http://twitter.com/williamsjoe
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com