Robert,
let's try to get to a baseline.
I have created a pretty basic configuration for you, it's after my
signature. Please try this one. Be sure to gather CPU statistics while it
is run.
For the initial test, *be sure that "/local_path" actually is that, a local
(non-NFS, non off-machine) directory.
Let the test run sufficiently long enough so that you are confident the
results are representative. Then let us know the pstats log, CPU
utilization and message rate you used.
When we know this, we can think about the next step.
Rainer
#### MODULES ####
module(load="imuxsock") # needs to be done just once Roberto 8-9-13
module(load="imklog")
module(load="impstats" interval="30" log.syslog="off"
log.file="/local_path/pstats")
# Provides UDP syslog reception
module(load="imudp"
TimeRequery="10"
SchedulingPolicy="fifo"
SchedulingPriority="10") # needs to be done just once Roberto 8-9-13
input(type="imudp" port="514") # Roberto 8-9-13
#### GLOBAL DIRECTIVES ####
# Use imprecise-old-style timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$MainMsgQueueType FixedArray
$MainMsgQueueSize 20000000
$MainMsgQueueWorkerThreads 2
$MainMsgQueueDequeueBatchSize 1000
$InputUDPMaxSessions 40000000
#### RULES ####
:hostname, contains, "fdfw" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_fw"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
:hostname, contains, "mail" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_mail"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
:hostname, contains, "shib" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_shib"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
:hostname, contains, "pdc" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_ad"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
:hostname, contains, "networks" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_networks"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
:hostname, contains, "rout" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_router"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
:hostname, contains, "vm" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_vm"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
:hostname, contains, "pix" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/local_path/f_pix"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
}
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
