Hello, I have three questions about action queues: 1) if I have a message modifier action (e.g. mmnormalize), should I add an action queue for better performance? 2) what's the flow of messages if I have both mmnormalize and, say, omelasticsearch? Messages flow from the main queue to mmnormalize's queue (if any) and then back to the main queue to be processed by omelasticsearch? 3) how does queue.dequeuebatchsize work if I have an action queue. For example:
* I have a main queue with dequeuebatchsize=100 * I have an omelasticsearch action with no queue (direct) and dequeuebatchsize=1000 and BulkMode="on" How many messages are sent to ES in a single bulk? 100? 1000? 1? I can do a test to answer this last question, but I'd like to understand how multiple actions and direct queues work. For example, I didn't notice any difference in performance (during a benchmark) with and without an action queue with mmnormalize. But maybe the bottleneck was somewhere else. Best regards, Radu -- Performance Monitoring * Log Analytics * Search Analytics Solr & Elasticsearch Support * http://sematext.com/ _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
