On 12 July 2011 10:28,  <[email protected]> wrote:
> this probably means that rsyslog is not keeping up with the volume of logs
> being sent to it (causing them to queue and eat memory)
> at this point 5.6.3 is a bit old, newer versions are probably faster and may
> solve your problem just from being enough faster to keep up with the
> incoming logs.

Pushed up to 5.8.1 and I still get the same amount of memory use.

iostat and cpu use seem reasonably sane, though at peak times most of
the threads peak to 99% CPU use.



> On Tue, 12 Jul 2011, Mike Forbes wrote:
>
>> Subject: [rsyslog] High memory use by rsyslogd - 5.6.3
>>
>> Rsyslogd is using 1.4G of resident memory.
>>
>> Here's my config snippets: http://paste.nothing.net.nz/806cba
>>
>> There's 14 hosts sending data to this rsyslog server.
>>
>> I've tried setting a ulimit
>> (syslog          soft     stack           1024)
>>
>> via pam & /etc/security/limits.conf
>>
>> and ulimit -a as the syslog user shows
>>
>> stack size              (kbytes, -s) 1024
>>
>>
>> Yet top clearly shows using 1.4G of resident memory:
>>
>> PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
>> 16414 syslog    20   0 2006m 1.4g 1252 S    0 72.1   1:28.83 rsyslogd -c4
>>
>> my rsyslogd version is rsyslogd 5.6.3
>>
>> Any advice is welcome.
>>
>> --
>> // Mike Forbes
>> GPG: BFC7 3F32 2CCF D91F 53E1  DF88 1578 B2E4 1399 6844
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
>
>



-- 
// Mike Forbes

Operations Engineer
Koordinates Ltd.

PO Box 1604, Shortland St, Auckland 1140, New Zealand

Cell +64-21-999416
Phone +64-9-966 0433
Fax +64-9-969 0045

Web http://koordinates.com/

GPG: BFC7 3F32 2CCF D91F 53E1  DF88 1578 B2E4 1399 6844
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to