the config you show doesn't match your explination (there's no use of dynafile
output in the config you are showing for example)
one thing that is odd, and usually wrong is that you have lots of threads
configured (2 for imudp, 4 for your ruleset), this is usually wrong and causes
excessive load.
can you share more of your config file?
Also, it would be useful to enable impstats, it will show what logs rsyslog is
getting what backlogs it's seeing on it's internal queues, etc.
what volume of logs is this box handling? I see you have the max log size set
very high (128K), but how many logs/sec?
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
