Right, well thanks for clearing that up. Robert
On Tue, Oct 15, 2013 at 2:17 AM, Rainer Gerhards <[email protected]> wrote: > On Mon, Oct 14, 2013 at 5:07 PM, robert s <[email protected]> wrote: > >> I honestly don't know I saw it under someone's config on the forum: >> >> http://kb.monitorware.com/performance-throughput-issues-rsyslog-t11865.html >> >> > ah, ok, so it was wrong there as well > > >> When I first started doing this project, and I just ran with it, after >> cleaning up the config I just happen to notice it, and looked it up, >> and could not find it. I did see that there is a "TCP max sessions" so >> > > for tcp "max sessions" makes sense, as there are tcp sessions. But UDP has > no session concept. > Side-note: such a huge value as used in the forum is harmless non-sense - > no tcp stack will handle that many concurrent sessions ;) > > Rainer > > I just figure I ask, and if didn't apply I would remove from the >> config. >> >> Robert >> >> >> On Mon, Oct 14, 2013 at 10:50 AM, Rainer Gerhards >> <[email protected]> wrote: >> > On Mon, Oct 14, 2013 at 4:10 PM, robert s <[email protected]> >> wrote: >> > >> >> While looking at the config file, "$InputUDPMaxSessions" >> > >> > >> > Quite honestly, I have no idea what parameter this is. Was it from a very >> > old version or some custom build? Not only I do not remember it, it is >> also >> > not present in at least current imudp code (and given our usual policies, >> > there should be traces if it ever was supported). What do you think it >> does >> > do? >> > >> > Rainer >> > >> >> and I was >> >> curious if I needed to put that under imudp module? like : >> >> >> >> input(typeinput(type="imudp" port="514" rcvbufSize="512k" >> >> udpmaxsessions="40000000) >> >> >> >> or is that parameter no longer supported? >> >> >> >> Thanks >> >> >> >> >> >> Robert >> >> >> >> >> >> On Mon, Oct 14, 2013 at 8:28 AM, robert s <[email protected]> >> wrote: >> >> > Hello David, here is my config file used for the latest pstats. >> >> > >> >> > #### MODULES #### >> >> > >> >> > module(load="imuxsock") # needs to be done just once Roberto 8-9-13 >> >> > module(load="imklog") >> >> > module(load="impstats" >> >> > interval="10" >> >> > log.syslog="off" >> >> > log.file="/var/log/pstats" >> >> > resetCounters="on") >> >> > >> >> > # Provides UDP syslog reception >> >> > module(load="imudp" >> >> > batchSize="1000" >> >> > TimeRequery="10" >> >> > SchedulingPolicy="fifo" >> >> > SchedulingPriority="10") # needs to be done just once Roberto 8-9-13 >> >> > input(type="imudp" port="514" ) #rcvbufSize="1m" ) # Roberto 8-9-13 >> >> > >> >> > #### GLOBAL DIRECTIVES #### >> >> > >> >> > # Use imprecise-old-style timestamp format >> >> > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat >> >> > >> >> > $MainMsgQueueType FixedArray >> >> > $MainMsgQueueSize 20000000 >> >> > $MainMsgQueueWorkerThreads 1 >> >> > $MainMsgQueueDequeueBatchSize 1000 >> >> > $InputUDPMaxSessions 40000000 >> >> > >> >> > #### RULES #### >> >> > >> >> > >> >> > >> >> > action >> >> > stop >> >> > >> >> > Robert >> >> > >> >> > >> >> > On Sat, Oct 12, 2013 at 12:30 AM, David Lang <[email protected]> wrote: >> >> >> could you post the config you used? looking at the pstats output, >> it's >> >> still >> >> >> showing action 1 doing a lot of work. >> >> >> >> >> >> >> >> >> David Lang >> >> >> >> >> >> On Fri, 11 Oct 2013, robert s wrote: >> >> >> >> >> >>> Date: Fri, 11 Oct 2013 14:43:22 -0400 >> >> >>> >> >> >>> From: robert s <[email protected]> >> >> >>> Reply-To: rsyslog-users <[email protected]> >> >> >>> To: rsyslog-users <[email protected]> >> >> >>> Subject: Re: [rsyslog] performance tweaking >> >> >>> >> >> >>> Ok that seemed to work, attached the mpstats and pstats >> >> >>> >> >> >>> Robert >> >> >>> >> >> >>> >> >> >>> On Fri, Oct 11, 2013 at 12:56 PM, David Lang <[email protected]> wrote: >> >> >>>> >> >> >>>> Ok, try leaving the action rule in place, but put a line before it >> >> that >> >> >>>> just >> >> >>>> says >> >> >>>> >> >> >>>> stop >> >> >>>> >> >> >>>> David Lang >> >> >>>> >> >> >>>> On Fri, 11 Oct 2013, robert s wrote: >> >> >>>> >> >> >>>>> Date: Fri, 11 Oct 2013 08:47:43 -0400 >> >> >>>>> >> >> >>>>> From: robert s <[email protected]> >> >> >>>>> Reply-To: rsyslog-users <[email protected]> >> >> >>>>> To: rsyslog-users <[email protected]> >> >> >>>>> Subject: Re: [rsyslog] performance tweaking >> >> >>>>> >> >> >>>>> >> >> >>>>> Hello David, >> >> >>>>> >> >> >>>>> when I attemp to start rsyslog without an action rule, I get this >> >> >>>>> message: >> >> >>>>> >> >> >>>>> Starting system logger: rsyslogd: run failed with error -2103 (see >> >> >>>>> rsyslog.h or try http://www.rsyslog.com/e/2103 to learn what that >> >> >>>>> number means) >> >> >>>>> [FAILED] >> >> >>>>> >> >> >>>>> >> >> >>>>> >> >> >>>>> >> >> >>>>> Robert >> >> >>>>> >> >> >>>>> >> >> >>>>> On Thu, Oct 10, 2013 at 5:33 PM, David Lang <[email protected]> >> wrote: >> >> >>>>>> >> >> >>>>>> >> >> >>>>>> right. >> >> >>>>>> >> >> >>>>>> David Lang >> >> >>>>>> >> >> >>>>>> On Thu, 10 Oct 2013, robert s wrote: >> >> >>>>>> >> >> >>>>>>> Date: Thu, 10 Oct 2013 16:56:28 -0400 >> >> >>>>>>> From: robert s <[email protected]> >> >> >>>>>>> Reply-To: rsyslog-users <[email protected]> >> >> >>>>>>> To: [email protected] >> >> >>>>>>> Subject: [rsyslog] performance tweaking >> >> >>>>>>> >> >> >>>>>>> >> >> >>>>>>> Hello David, >> >> >>>>>>> >> >> >>>>>>> So I will go ahead and remove the action input, (I guess just >> >> comment >> >> >>>>>>> out action, type and File) and rerun the test. >> >> >>>>>>> >> >> >>>>>>> Robert >> >> >>>>>>> _______________________________________________ >> >> >>>>>>> rsyslog mailing list >> >> >>>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> >>>>>>> http://www.rsyslog.com/professional-services/ >> >> >>>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> >>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by >> a >> >> >>>>>>> myriad >> >> >>>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST >> if >> >> you >> >> >>>>>>> DON'T >> >> >>>>>>> LIKE THAT. >> >> >>>>>>> >> >> >>>>>> _______________________________________________ >> >> >>>>>> rsyslog mailing list >> >> >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> >>>>>> http://www.rsyslog.com/professional-services/ >> >> >>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> >>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> >> >>>>>> myriad >> >> >>>>>> of >> >> >>>>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if >> you >> >> >>>>>> DON'T >> >> >>>>>> LIKE THAT. >> >> >>>>> >> >> >>>>> >> >> >>>>> _______________________________________________ >> >> >>>>> rsyslog mailing list >> >> >>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> >>>>> http://www.rsyslog.com/professional-services/ >> >> >>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> >> myriad >> >> >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if >> >> you >> >> >>>>> DON'T >> >> >>>>> LIKE THAT. >> >> >>>>> >> >> >>>> _______________________________________________ >> >> >>>> rsyslog mailing list >> >> >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> >>>> http://www.rsyslog.com/professional-services/ >> >> >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> >> myriad >> >> >>>> of >> >> >>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> >> DON'T >> >> >>>> LIKE THAT. >> >> >> >> >> >> >> >> >> _______________________________________________ >> >> >> rsyslog mailing list >> >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> >> http://www.rsyslog.com/professional-services/ >> >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> >> myriad of >> >> >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> >> DON'T >> >> >> LIKE THAT. >> >> >> _______________________________________________ >> >> >> rsyslog mailing list >> >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> >> http://www.rsyslog.com/professional-services/ >> >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> >> myriad of >> >> >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> >> DON'T >> >> >> LIKE THAT. >> >> _______________________________________________ >> >> rsyslog mailing list >> >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> >> http://www.rsyslog.com/professional-services/ >> >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> >> DON'T LIKE THAT. >> >> >> > _______________________________________________ >> > rsyslog mailing list >> > http://lists.adiscon.net/mailman/listinfo/rsyslog >> > http://www.rsyslog.com/professional-services/ >> > What's up with rsyslog? Follow https://twitter.com/rgerhards >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
