On Tue, 12 Jul 2011, Mike Forbes wrote:

On 12 July 2011 10:28,  <[email protected]> wrote:
this probably means that rsyslog is not keeping up with the volume of logs
being sent to it (causing them to queue and eat memory)
at this point 5.6.3 is a bit old, newer versions are probably faster and may
solve your problem just from being enough faster to keep up with the
incoming logs.

Pushed up to 5.8.1 and I still get the same amount of memory use.

iostat and cpu use seem reasonably sane, though at peak times most of
the threads peak to 99% CPU use.

Ok, this does sound like you aren't able to keep up with the incoming log volume, what sort of volume do you get?

David Lang



On Tue, 12 Jul 2011, Mike Forbes wrote:

Subject: [rsyslog] High memory use by rsyslogd - 5.6.3

Rsyslogd is using 1.4G of resident memory.

Here's my config snippets: http://paste.nothing.net.nz/806cba

There's 14 hosts sending data to this rsyslog server.

I've tried setting a ulimit
(syslog          soft     stack           1024)

via pam & /etc/security/limits.conf

and ulimit -a as the syslog user shows

stack size              (kbytes, -s) 1024


Yet top clearly shows using 1.4G of resident memory:

PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
16414 syslog    20   0 2006m 1.4g 1252 S    0 72.1   1:28.83 rsyslogd -c4

my rsyslogd version is rsyslogd 5.6.3

Any advice is welcome.

--
// Mike Forbes
GPG: BFC7 3F32 2CCF D91F 53E1  DF88 1578 B2E4 1399 6844
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com





--
// Mike Forbes

Operations Engineer
Koordinates Ltd.

PO Box 1604, Shortland St, Auckland 1140, New Zealand

Cell +64-21-999416
Phone +64-9-966 0433
Fax +64-9-969 0045

Web http://koordinates.com/

GPG: BFC7 3F32 2CCF D91F 53E1  DF88 1578 B2E4 1399 6844
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to