On Fri, 21 Jun 2013, Boylan, James wrote:
First off, a disclaimer that I haven't actually used this. I roll my logs once
per minute and compress them as part of the log rotation.
Has anyone made use of the automatic gzip compression in 7.4.1 on a central
logging server? If so, what are your observations regarding performance? And
have you used it in a situation where you have a large amount of syslog
traffic being received by the server?
I believe that what rsyslog implements is zip, not gzip (not quite as good
compression, but less CPU
I'm curious as I currently have a follow up program that compresses anything
older than 4 hours, but as you can imagine it has an overall impact on the
load for the server. I suspect that trying to implement it through the omfile
gzip function would merely offset that load into the Rsyslog application, but
I wanted to see if anyone had direct experience with it.
If you use the built-in compression then you are just shifting the CPU load into
rsyslog, but you are avoiding the I/O load of writing the file and then reading
it again. (if you have enough ram, this may end up being reads from memory
instead of from disk).
If you use omprog to call gzip, the CPU will be used by the gzip process, not by
rsyslog, and you still avoid the I/O load.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
