Hi,
I observed that when I reload or restart syslog-ng, an other instance of
sec.pl is starting and remain in sleeping mode. As a result, after many
reloads of syslog-ng, server ressources workload increase.
Why does an instance of SEC starting for each reload of syslog-ng ? How
I can stop it
I have a ticketing process that is in need of queueing or pacing of
actions. Because SEC is fairly efficient, it can process logs,
deduplicate and generate tickets rather rapidly. It is fast enough that
the ticket gateway can get swamped and tip over. As I see it, there are
two things that n
I would suggest you use a message queue. There are several high quality open
source implementations available, e.g:
http://activemq.apache.org/
http://qpid.apache.org/
I'm not currently aware of any MQ distributions that are set up specifically to
work with SEC, but it doesn't sound like that's
