Thanks for the help guys - I got my prototype working. I wrote up some stuff about the final design here https://www.bashton.com/blog/2016/elk-on-ark/
On 7 April 2016 at 19:27, David Lang <[email protected]> wrote: > On Thu, 7 Apr 2016, Matt Ford wrote: > >> One thing that makes me nervous is the overhead of doing the >> transformation via normalize on rsyslog. Some the applications >> generate a lot of logs per second. > > > mmnormalize is very fast, and it's getting faster as it transitions from > json-c to libfastjson and optimizations hit the library. > > David Lang > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
