On Thu, 3 Oct 2013, Robert wrote:
Date: Thu, 03 Oct 2013 08:37:15 -0400
From: Robert <[email protected]>
To: David Lang <[email protected]>, rsyslog-users <[email protected]>
Subject: Re: [rsyslog] Tr : Re: perfomance tweaking (fwd)
Hello everyone,
As I noted on my last note, I have maxed the spirent out at 395k eps. I will
change rsyslog to send to one file, do I need to do:
sorry, I missed this in the last note
:hostname, contains, "*" {
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/var/log/test/f_fw"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
stop
}
or should it be writter another way?
simpler would be just:
action (type="omfile"
DirCreateMode="0700"
FileCreateMode="0644"
File="/var/log/test/f_fw"
FlushOnTXEnd="on"
IOBufferSize="8k"
)
stop
since this is going to be unconditional, we don't need to define any conditions
(at least with version 7)
could you do the full pstat, iostat, top gathering for this run?
Also, since there is only one output, remove the threads configuration, it
almost certinly won't help and will probably hurt.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
