On Tue, 12 Jul 2011, Mike Forbes wrote:
On 12 July 2011 10:28, <[email protected]> wrote:
this probably means that rsyslog is not keeping up with the volume of logs
being sent to it (causing them to queue and eat memory)
at this point 5.6.3 is a bit old, newer versions are probably faster and may
solve your problem just from being enough faster to keep up with the
incoming logs.
Pushed up to 5.8.1 and I still get the same amount of memory use.
iostat and cpu use seem reasonably sane, though at peak times most of
the threads peak to 99% CPU use.
Ok, this does sound like you aren't able to keep up with the incoming log
volume, what sort of volume do you get?
David Lang
On Tue, 12 Jul 2011, Mike Forbes wrote:
Subject: [rsyslog] High memory use by rsyslogd - 5.6.3
Rsyslogd is using 1.4G of resident memory.
Here's my config snippets: http://paste.nothing.net.nz/806cba
There's 14 hosts sending data to this rsyslog server.
I've tried setting a ulimit
(syslog soft stack 1024)
via pam & /etc/security/limits.conf
and ulimit -a as the syslog user shows
stack size (kbytes, -s) 1024
Yet top clearly shows using 1.4G of resident memory:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
16414 syslog 20 0 2006m 1.4g 1252 S 0 72.1 1:28.83 rsyslogd -c4
my rsyslogd version is rsyslogd 5.6.3
Any advice is welcome.
--
// Mike Forbes
GPG: BFC7 3F32 2CCF D91F 53E1 DF88 1578 B2E4 1399 6844
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
--
// Mike Forbes
Operations Engineer
Koordinates Ltd.
PO Box 1604, Shortland St, Auckland 1140, New Zealand
Cell +64-21-999416
Phone +64-9-966 0433
Fax +64-9-969 0045
Web http://koordinates.com/
GPG: BFC7 3F32 2CCF D91F 53E1 DF88 1578 B2E4 1399 6844
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com