Hello David, here is my config file used for the latest pstats.
#### MODULES ####
module(load="imuxsock") # needs to be done just once Roberto 8-9-13
module(load="imklog")
module(load="impstats"
interval="10"
log.syslog="off"
log.file="/var/log/pstats"
resetCounters="on")
# Provides UDP syslog reception
module(load="imudp"
batchSize="1000"
TimeRequery="10"
SchedulingPolicy="fifo"
SchedulingPriority="10") # needs to be done just once Roberto 8-9-13
input(type="imudp" port="514" ) #rcvbufSize="1m" ) # Roberto 8-9-13
#### GLOBAL DIRECTIVES ####
# Use imprecise-old-style timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$MainMsgQueueType FixedArray
$MainMsgQueueSize 20000000
$MainMsgQueueWorkerThreads 1
$MainMsgQueueDequeueBatchSize 1000
$InputUDPMaxSessions 40000000
#### RULES ####
action
stop
Robert
On Sat, Oct 12, 2013 at 12:30 AM, David Lang <[email protected]> wrote:
> could you post the config you used? looking at the pstats output, it's still
> showing action 1 doing a lot of work.
>
>
> David Lang
>
> On Fri, 11 Oct 2013, robert s wrote:
>
>> Date: Fri, 11 Oct 2013 14:43:22 -0400
>>
>> From: robert s <[email protected]>
>> Reply-To: rsyslog-users <[email protected]>
>> To: rsyslog-users <[email protected]>
>> Subject: Re: [rsyslog] performance tweaking
>>
>> Ok that seemed to work, attached the mpstats and pstats
>>
>> Robert
>>
>>
>> On Fri, Oct 11, 2013 at 12:56 PM, David Lang <[email protected]> wrote:
>>>
>>> Ok, try leaving the action rule in place, but put a line before it that
>>> just
>>> says
>>>
>>> stop
>>>
>>> David Lang
>>>
>>> On Fri, 11 Oct 2013, robert s wrote:
>>>
>>>> Date: Fri, 11 Oct 2013 08:47:43 -0400
>>>>
>>>> From: robert s <[email protected]>
>>>> Reply-To: rsyslog-users <[email protected]>
>>>> To: rsyslog-users <[email protected]>
>>>> Subject: Re: [rsyslog] performance tweaking
>>>>
>>>>
>>>> Hello David,
>>>>
>>>> when I attemp to start rsyslog without an action rule, I get this
>>>> message:
>>>>
>>>> Starting system logger: rsyslogd: run failed with error -2103 (see
>>>> rsyslog.h or try http://www.rsyslog.com/e/2103 to learn what that
>>>> number means)
>>>> [FAILED]
>>>>
>>>>
>>>>
>>>>
>>>> Robert
>>>>
>>>>
>>>> On Thu, Oct 10, 2013 at 5:33 PM, David Lang <[email protected]> wrote:
>>>>>
>>>>>
>>>>> right.
>>>>>
>>>>> David Lang
>>>>>
>>>>> On Thu, 10 Oct 2013, robert s wrote:
>>>>>
>>>>>> Date: Thu, 10 Oct 2013 16:56:28 -0400
>>>>>> From: robert s <[email protected]>
>>>>>> Reply-To: rsyslog-users <[email protected]>
>>>>>> To: [email protected]
>>>>>> Subject: [rsyslog] performance tweaking
>>>>>>
>>>>>>
>>>>>> Hello David,
>>>>>>
>>>>>> So I will go ahead and remove the action input, (I guess just comment
>>>>>> out action, type and File) and rerun the test.
>>>>>>
>>>>>> Robert
>>>>>> _______________________________________________
>>>>>> rsyslog mailing list
>>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>>>> http://www.rsyslog.com/professional-services/
>>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>>>>>> myriad
>>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>>>>> DON'T
>>>>>> LIKE THAT.
>>>>>>
>>>>> _______________________________________________
>>>>> rsyslog mailing list
>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>>> http://www.rsyslog.com/professional-services/
>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>>>>> myriad
>>>>> of
>>>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>>>> DON'T
>>>>> LIKE THAT.
>>>>
>>>>
>>>> _______________________________________________
>>>> rsyslog mailing list
>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> http://www.rsyslog.com/professional-services/
>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>>> DON'T
>>>> LIKE THAT.
>>>>
>>> _______________________________________________
>>> rsyslog mailing list
>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>> http://www.rsyslog.com/professional-services/
>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>>> of
>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
>>> LIKE THAT.
>
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
