While looking at the config file, "$InputUDPMaxSessions" and I was curious if I needed to put that under imudp module? like :
input(typeinput(type="imudp" port="514" rcvbufSize="512k" udpmaxsessions="40000000) or is that parameter no longer supported? Thanks Robert On Mon, Oct 14, 2013 at 8:28 AM, robert s <[email protected]> wrote: > Hello David, here is my config file used for the latest pstats. > > #### MODULES #### > > module(load="imuxsock") # needs to be done just once Roberto 8-9-13 > module(load="imklog") > module(load="impstats" > interval="10" > log.syslog="off" > log.file="/var/log/pstats" > resetCounters="on") > > # Provides UDP syslog reception > module(load="imudp" > batchSize="1000" > TimeRequery="10" > SchedulingPolicy="fifo" > SchedulingPriority="10") # needs to be done just once Roberto 8-9-13 > input(type="imudp" port="514" ) #rcvbufSize="1m" ) # Roberto 8-9-13 > > #### GLOBAL DIRECTIVES #### > > # Use imprecise-old-style timestamp format > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > > $MainMsgQueueType FixedArray > $MainMsgQueueSize 20000000 > $MainMsgQueueWorkerThreads 1 > $MainMsgQueueDequeueBatchSize 1000 > $InputUDPMaxSessions 40000000 > > #### RULES #### > > > > action > stop > > Robert > > > On Sat, Oct 12, 2013 at 12:30 AM, David Lang <[email protected]> wrote: >> could you post the config you used? looking at the pstats output, it's still >> showing action 1 doing a lot of work. >> >> >> David Lang >> >> On Fri, 11 Oct 2013, robert s wrote: >> >>> Date: Fri, 11 Oct 2013 14:43:22 -0400 >>> >>> From: robert s <[email protected]> >>> Reply-To: rsyslog-users <[email protected]> >>> To: rsyslog-users <[email protected]> >>> Subject: Re: [rsyslog] performance tweaking >>> >>> Ok that seemed to work, attached the mpstats and pstats >>> >>> Robert >>> >>> >>> On Fri, Oct 11, 2013 at 12:56 PM, David Lang <[email protected]> wrote: >>>> >>>> Ok, try leaving the action rule in place, but put a line before it that >>>> just >>>> says >>>> >>>> stop >>>> >>>> David Lang >>>> >>>> On Fri, 11 Oct 2013, robert s wrote: >>>> >>>>> Date: Fri, 11 Oct 2013 08:47:43 -0400 >>>>> >>>>> From: robert s <[email protected]> >>>>> Reply-To: rsyslog-users <[email protected]> >>>>> To: rsyslog-users <[email protected]> >>>>> Subject: Re: [rsyslog] performance tweaking >>>>> >>>>> >>>>> Hello David, >>>>> >>>>> when I attemp to start rsyslog without an action rule, I get this >>>>> message: >>>>> >>>>> Starting system logger: rsyslogd: run failed with error -2103 (see >>>>> rsyslog.h or try http://www.rsyslog.com/e/2103 to learn what that >>>>> number means) >>>>> [FAILED] >>>>> >>>>> >>>>> >>>>> >>>>> Robert >>>>> >>>>> >>>>> On Thu, Oct 10, 2013 at 5:33 PM, David Lang <[email protected]> wrote: >>>>>> >>>>>> >>>>>> right. >>>>>> >>>>>> David Lang >>>>>> >>>>>> On Thu, 10 Oct 2013, robert s wrote: >>>>>> >>>>>>> Date: Thu, 10 Oct 2013 16:56:28 -0400 >>>>>>> From: robert s <[email protected]> >>>>>>> Reply-To: rsyslog-users <[email protected]> >>>>>>> To: [email protected] >>>>>>> Subject: [rsyslog] performance tweaking >>>>>>> >>>>>>> >>>>>>> Hello David, >>>>>>> >>>>>>> So I will go ahead and remove the action input, (I guess just comment >>>>>>> out action, type and File) and rerun the test. >>>>>>> >>>>>>> Robert >>>>>>> _______________________________________________ >>>>>>> rsyslog mailing list >>>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>>>> http://www.rsyslog.com/professional-services/ >>>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >>>>>>> myriad >>>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>>>>> DON'T >>>>>>> LIKE THAT. >>>>>>> >>>>>> _______________________________________________ >>>>>> rsyslog mailing list >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>>> http://www.rsyslog.com/professional-services/ >>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >>>>>> myriad >>>>>> of >>>>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>>>> DON'T >>>>>> LIKE THAT. >>>>> >>>>> >>>>> _______________________________________________ >>>>> rsyslog mailing list >>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>> http://www.rsyslog.com/professional-services/ >>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>>> DON'T >>>>> LIKE THAT. >>>>> >>>> _______________________________________________ >>>> rsyslog mailing list >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>> http://www.rsyslog.com/professional-services/ >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>>> of >>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T >>>> LIKE THAT. >> >> >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T >> LIKE THAT. >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T >> LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
