I honestly don't know I saw it under someone's config on the forum: http://kb.monitorware.com/performance-throughput-issues-rsyslog-t11865.html
When I first started doing this project, and I just ran with it, after cleaning up the config I just happen to notice it, and looked it up, and could not find it. I did see that there is a "TCP max sessions" so I just figure I ask, and if didn't apply I would remove from the config. Robert On Mon, Oct 14, 2013 at 10:50 AM, Rainer Gerhards <[email protected]> wrote: > On Mon, Oct 14, 2013 at 4:10 PM, robert s <[email protected]> wrote: > >> While looking at the config file, "$InputUDPMaxSessions" > > > Quite honestly, I have no idea what parameter this is. Was it from a very > old version or some custom build? Not only I do not remember it, it is also > not present in at least current imudp code (and given our usual policies, > there should be traces if it ever was supported). What do you think it does > do? > > Rainer > >> and I was >> curious if I needed to put that under imudp module? like : >> >> input(typeinput(type="imudp" port="514" rcvbufSize="512k" >> udpmaxsessions="40000000) >> >> or is that parameter no longer supported? >> >> Thanks >> >> >> Robert >> >> >> On Mon, Oct 14, 2013 at 8:28 AM, robert s <[email protected]> wrote: >> > Hello David, here is my config file used for the latest pstats. >> > >> > #### MODULES #### >> > >> > module(load="imuxsock") # needs to be done just once Roberto 8-9-13 >> > module(load="imklog") >> > module(load="impstats" >> > interval="10" >> > log.syslog="off" >> > log.file="/var/log/pstats" >> > resetCounters="on") >> > >> > # Provides UDP syslog reception >> > module(load="imudp" >> > batchSize="1000" >> > TimeRequery="10" >> > SchedulingPolicy="fifo" >> > SchedulingPriority="10") # needs to be done just once Roberto 8-9-13 >> > input(type="imudp" port="514" ) #rcvbufSize="1m" ) # Roberto 8-9-13 >> > >> > #### GLOBAL DIRECTIVES #### >> > >> > # Use imprecise-old-style timestamp format >> > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat >> > >> > $MainMsgQueueType FixedArray >> > $MainMsgQueueSize 20000000 >> > $MainMsgQueueWorkerThreads 1 >> > $MainMsgQueueDequeueBatchSize 1000 >> > $InputUDPMaxSessions 40000000 >> > >> > #### RULES #### >> > >> > >> > >> > action >> > stop >> > >> > Robert >> > >> > >> > On Sat, Oct 12, 2013 at 12:30 AM, David Lang <[email protected]> wrote: >> >> could you post the config you used? looking at the pstats output, it's >> still >> >> showing action 1 doing a lot of work. >> >> >> >> >> >> David Lang >> >> >> >> On Fri, 11 Oct 2013, robert s wrote: >> >> >> >>> Date: Fri, 11 Oct 2013 14:43:22 -0400 >> >>> >> >>> From: robert s <[email protected]> >> >>> Reply-To: rsyslog-users <[email protected]> >> >>> To: rsyslog-users <[email protected]> >> >>> Subject: Re: [rsyslog] performance tweaking >> >>> >> >>> Ok that seemed to work, attached the mpstats and pstats >> >>> >> >>> Robert >> >>> >> >>> >> >>> On Fri, Oct 11, 2013 at 12:56 PM, David Lang <[email protected]> wrote: >> >>>> >> >>>> Ok, try leaving the action rule in place, but put a line before it >> that >> >>>> just >> >>>> says >> >>>> >> >>>> stop >> >>>> >> >>>> David Lang >> >>>> >> >>>> On Fri, 11 Oct 2013, robert s wrote: >> >>>> >> >>>>> Date: Fri, 11 Oct 2013 08:47:43 -0400 >> >>>>> >> >>>>> From: robert s <[email protected]> >> >>>>> Reply-To: rsyslog-users <[email protected]> >> >>>>> To: rsyslog-users <[email protected]> >> >>>>> Subject: Re: [rsyslog] performance tweaking >> >>>>> >> >>>>> >> >>>>> Hello David, >> >>>>> >> >>>>> when I attemp to start rsyslog without an action rule, I get this >> >>>>> message: >> >>>>> >> >>>>> Starting system logger: rsyslogd: run failed with error -2103 (see >> >>>>> rsyslog.h or try http://www.rsyslog.com/e/2103 to learn what that >> >>>>> number means) >> >>>>> [FAILED] >> >>>>> >> >>>>> >> >>>>> >> >>>>> >> >>>>> Robert >> >>>>> >> >>>>> >> >>>>> On Thu, Oct 10, 2013 at 5:33 PM, David Lang <[email protected]> wrote: >> >>>>>> >> >>>>>> >> >>>>>> right. >> >>>>>> >> >>>>>> David Lang >> >>>>>> >> >>>>>> On Thu, 10 Oct 2013, robert s wrote: >> >>>>>> >> >>>>>>> Date: Thu, 10 Oct 2013 16:56:28 -0400 >> >>>>>>> From: robert s <[email protected]> >> >>>>>>> Reply-To: rsyslog-users <[email protected]> >> >>>>>>> To: [email protected] >> >>>>>>> Subject: [rsyslog] performance tweaking >> >>>>>>> >> >>>>>>> >> >>>>>>> Hello David, >> >>>>>>> >> >>>>>>> So I will go ahead and remove the action input, (I guess just >> comment >> >>>>>>> out action, type and File) and rerun the test. >> >>>>>>> >> >>>>>>> Robert >> >>>>>>> _______________________________________________ >> >>>>>>> rsyslog mailing list >> >>>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >>>>>>> http://www.rsyslog.com/professional-services/ >> >>>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> >>>>>>> myriad >> >>>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if >> you >> >>>>>>> DON'T >> >>>>>>> LIKE THAT. >> >>>>>>> >> >>>>>> _______________________________________________ >> >>>>>> rsyslog mailing list >> >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >>>>>> http://www.rsyslog.com/professional-services/ >> >>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> >>>>>> myriad >> >>>>>> of >> >>>>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> >>>>>> DON'T >> >>>>>> LIKE THAT. >> >>>>> >> >>>>> >> >>>>> _______________________________________________ >> >>>>> rsyslog mailing list >> >>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >>>>> http://www.rsyslog.com/professional-services/ >> >>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> myriad >> >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if >> you >> >>>>> DON'T >> >>>>> LIKE THAT. >> >>>>> >> >>>> _______________________________________________ >> >>>> rsyslog mailing list >> >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >>>> http://www.rsyslog.com/professional-services/ >> >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> myriad >> >>>> of >> >>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T >> >>>> LIKE THAT. >> >> >> >> >> >> _______________________________________________ >> >> rsyslog mailing list >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> http://www.rsyslog.com/professional-services/ >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> myriad of >> >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T >> >> LIKE THAT. >> >> _______________________________________________ >> >> rsyslog mailing list >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> http://www.rsyslog.com/professional-services/ >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> myriad of >> >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T >> >> LIKE THAT. >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
