On Mon, Oct 14, 2013 at 5:07 PM, robert s <[email protected]> wrote:
> I honestly don't know I saw it under someone's config on the forum: > > http://kb.monitorware.com/performance-throughput-issues-rsyslog-t11865.html > > ah, ok, so it was wrong there as well > When I first started doing this project, and I just ran with it, after > cleaning up the config I just happen to notice it, and looked it up, > and could not find it. I did see that there is a "TCP max sessions" so > for tcp "max sessions" makes sense, as there are tcp sessions. But UDP has no session concept. Side-note: such a huge value as used in the forum is harmless non-sense - no tcp stack will handle that many concurrent sessions ;) Rainer I just figure I ask, and if didn't apply I would remove from the > config. > > Robert > > > On Mon, Oct 14, 2013 at 10:50 AM, Rainer Gerhards > <[email protected]> wrote: > > On Mon, Oct 14, 2013 at 4:10 PM, robert s <[email protected]> > wrote: > > > >> While looking at the config file, "$InputUDPMaxSessions" > > > > > > Quite honestly, I have no idea what parameter this is. Was it from a very > > old version or some custom build? Not only I do not remember it, it is > also > > not present in at least current imudp code (and given our usual policies, > > there should be traces if it ever was supported). What do you think it > does > > do? > > > > Rainer > > > >> and I was > >> curious if I needed to put that under imudp module? like : > >> > >> input(typeinput(type="imudp" port="514" rcvbufSize="512k" > >> udpmaxsessions="40000000) > >> > >> or is that parameter no longer supported? > >> > >> Thanks > >> > >> > >> Robert > >> > >> > >> On Mon, Oct 14, 2013 at 8:28 AM, robert s <[email protected]> > wrote: > >> > Hello David, here is my config file used for the latest pstats. > >> > > >> > #### MODULES #### > >> > > >> > module(load="imuxsock") # needs to be done just once Roberto 8-9-13 > >> > module(load="imklog") > >> > module(load="impstats" > >> > interval="10" > >> > log.syslog="off" > >> > log.file="/var/log/pstats" > >> > resetCounters="on") > >> > > >> > # Provides UDP syslog reception > >> > module(load="imudp" > >> > batchSize="1000" > >> > TimeRequery="10" > >> > SchedulingPolicy="fifo" > >> > SchedulingPriority="10") # needs to be done just once Roberto 8-9-13 > >> > input(type="imudp" port="514" ) #rcvbufSize="1m" ) # Roberto 8-9-13 > >> > > >> > #### GLOBAL DIRECTIVES #### > >> > > >> > # Use imprecise-old-style timestamp format > >> > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > >> > > >> > $MainMsgQueueType FixedArray > >> > $MainMsgQueueSize 20000000 > >> > $MainMsgQueueWorkerThreads 1 > >> > $MainMsgQueueDequeueBatchSize 1000 > >> > $InputUDPMaxSessions 40000000 > >> > > >> > #### RULES #### > >> > > >> > > >> > > >> > action > >> > stop > >> > > >> > Robert > >> > > >> > > >> > On Sat, Oct 12, 2013 at 12:30 AM, David Lang <[email protected]> wrote: > >> >> could you post the config you used? looking at the pstats output, > it's > >> still > >> >> showing action 1 doing a lot of work. > >> >> > >> >> > >> >> David Lang > >> >> > >> >> On Fri, 11 Oct 2013, robert s wrote: > >> >> > >> >>> Date: Fri, 11 Oct 2013 14:43:22 -0400 > >> >>> > >> >>> From: robert s <[email protected]> > >> >>> Reply-To: rsyslog-users <[email protected]> > >> >>> To: rsyslog-users <[email protected]> > >> >>> Subject: Re: [rsyslog] performance tweaking > >> >>> > >> >>> Ok that seemed to work, attached the mpstats and pstats > >> >>> > >> >>> Robert > >> >>> > >> >>> > >> >>> On Fri, Oct 11, 2013 at 12:56 PM, David Lang <[email protected]> wrote: > >> >>>> > >> >>>> Ok, try leaving the action rule in place, but put a line before it > >> that > >> >>>> just > >> >>>> says > >> >>>> > >> >>>> stop > >> >>>> > >> >>>> David Lang > >> >>>> > >> >>>> On Fri, 11 Oct 2013, robert s wrote: > >> >>>> > >> >>>>> Date: Fri, 11 Oct 2013 08:47:43 -0400 > >> >>>>> > >> >>>>> From: robert s <[email protected]> > >> >>>>> Reply-To: rsyslog-users <[email protected]> > >> >>>>> To: rsyslog-users <[email protected]> > >> >>>>> Subject: Re: [rsyslog] performance tweaking > >> >>>>> > >> >>>>> > >> >>>>> Hello David, > >> >>>>> > >> >>>>> when I attemp to start rsyslog without an action rule, I get this > >> >>>>> message: > >> >>>>> > >> >>>>> Starting system logger: rsyslogd: run failed with error -2103 (see > >> >>>>> rsyslog.h or try http://www.rsyslog.com/e/2103 to learn what that > >> >>>>> number means) > >> >>>>> [FAILED] > >> >>>>> > >> >>>>> > >> >>>>> > >> >>>>> > >> >>>>> Robert > >> >>>>> > >> >>>>> > >> >>>>> On Thu, Oct 10, 2013 at 5:33 PM, David Lang <[email protected]> > wrote: > >> >>>>>> > >> >>>>>> > >> >>>>>> right. > >> >>>>>> > >> >>>>>> David Lang > >> >>>>>> > >> >>>>>> On Thu, 10 Oct 2013, robert s wrote: > >> >>>>>> > >> >>>>>>> Date: Thu, 10 Oct 2013 16:56:28 -0400 > >> >>>>>>> From: robert s <[email protected]> > >> >>>>>>> Reply-To: rsyslog-users <[email protected]> > >> >>>>>>> To: [email protected] > >> >>>>>>> Subject: [rsyslog] performance tweaking > >> >>>>>>> > >> >>>>>>> > >> >>>>>>> Hello David, > >> >>>>>>> > >> >>>>>>> So I will go ahead and remove the action input, (I guess just > >> comment > >> >>>>>>> out action, type and File) and rerun the test. > >> >>>>>>> > >> >>>>>>> Robert > >> >>>>>>> _______________________________________________ > >> >>>>>>> rsyslog mailing list > >> >>>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> >>>>>>> http://www.rsyslog.com/professional-services/ > >> >>>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> >>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by > a > >> >>>>>>> myriad > >> >>>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if > >> you > >> >>>>>>> DON'T > >> >>>>>>> LIKE THAT. > >> >>>>>>> > >> >>>>>> _______________________________________________ > >> >>>>>> rsyslog mailing list > >> >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> >>>>>> http://www.rsyslog.com/professional-services/ > >> >>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> >>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > >> >>>>>> myriad > >> >>>>>> of > >> >>>>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > >> >>>>>> DON'T > >> >>>>>> LIKE THAT. > >> >>>>> > >> >>>>> > >> >>>>> _______________________________________________ > >> >>>>> rsyslog mailing list > >> >>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> >>>>> http://www.rsyslog.com/professional-services/ > >> >>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > >> myriad > >> >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > >> you > >> >>>>> DON'T > >> >>>>> LIKE THAT. > >> >>>>> > >> >>>> _______________________________________________ > >> >>>> rsyslog mailing list > >> >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> >>>> http://www.rsyslog.com/professional-services/ > >> >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > >> myriad > >> >>>> of > >> >>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > >> DON'T > >> >>>> LIKE THAT. > >> >> > >> >> > >> >> _______________________________________________ > >> >> rsyslog mailing list > >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> >> http://www.rsyslog.com/professional-services/ > >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > >> myriad of > >> >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > >> DON'T > >> >> LIKE THAT. > >> >> _______________________________________________ > >> >> rsyslog mailing list > >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> >> http://www.rsyslog.com/professional-services/ > >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > >> myriad of > >> >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > >> DON'T > >> >> LIKE THAT. > >> _______________________________________________ > >> rsyslog mailing list > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> http://www.rsyslog.com/professional-services/ > >> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > >> DON'T LIKE THAT. > >> > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
