[syslog-ng] config file question

Fekete Robert frobert at balabit.hu
Fri Jan 29 15:13:29 CET 2010


Hi,
Just a thought: do you really need to keep that many files open simultaneously?
Can't you use macros (e.g., $HOUR or even $MIN) to lower the number of files 
needed in parallel?

Robert

Rory Toma wrote:

> OK, I have a question. I've found that it is good to run several 
> syslog-ng processes when dealing with tens of thousands of log files.
> 
> So, I'd like to receive everything in one syslog-ng process, and forward 
> them, via localhost, to about a hundred or so different syslog-ng 
> processes on the same machine. Is there a good way to write a  (log; 
> filter; dest;) line that would round-robin between a bunch of 
> destinations in a single line?
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
> 
> 



More information about the syslog-ng mailing list