Hi all,
Over next week, I need to setup a rsyslog forwarder server based on
CentOS 7.x x86_64.
This host will receive logs from 500 servers (+/-) with an estimated
EPS of 5k.
This rsyslog forwarder will forward all these messages to our internal
SIEM server. But due to this SIEM host is not in HA setup, I will need
to queue messages from time to time if SIEM server suffers some type of
problem.
My question is: what compress ratio is defined in queued files by
rsyslog? Or it is configurable?? I need to know some approx. to decide
how many storage I will need to dimension in this server and to know an
estimated time I can keep logs stored.
Thanks.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
