<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="chsdate"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"\@宋体";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
font-size:10.5pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
/* Page Definitions */
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;
layout-grid:15.6pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=ZH-CN link=blue vlink=purple style='text-justify-trim:punctuation'>
<div class=Section1 style='layout-grid:15.6pt'>
<p class=MsoNormal><font size=3 face=宋体><span lang=EN-US style='font-size:12.0pt;
font-family:宋体'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><b><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt;font-weight:
bold'> the configure file as follows: </span></font></b><b><font
size=3 face=宋体><span lang=EN-US style='font-size:12.0pt;font-family:宋体;
font-weight:bold'><o:p></o:p></span></font></b></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>options {
use_dns(no); create_dirs(yes);ts_format(iso); }; <o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>#options {
log_fifo_size(3000); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>source src {
udp(ip(<st1:chsdate IsROCDate="False" IsLunarDate="False" Day="30" Month="12"
Year="1899" w:st="on">0.0.0</st1:chsdate>.0) port(514) ); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>filter f_kern
{ facility(kern); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>filter
f_authpriv { facility(auth,authpriv); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>filter f_mail
{ facility(mail); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>filter f_cron
{ facility(cron); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>filter f_boot
{ facility(local7); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>filter
f_spooler { facility(uucp, news) and level(crit..emerg); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>filter
f_messages { level(info..emerg) and not facility(authpriv, cron, mail); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>destination
kern { file("/home/syslog-ng/$YEAR/$HOST/kernel-$MONTH"); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>destination
authpriv { file("/home/syslog-ng/$YEAR/$HOST/secure-$MONTH"); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>destination
mail { file("/home/syslog-ng/$YEAR/$HOST/maillog-$MONTH"); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>destination
cron { file("/home/syslog-ng/$YEAR/$HOST/cron-$MONTH"); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>destination
boot { file("/home/syslog-ng/$YEAR/$HOST/boot.log-$MONTH"); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>destination
spooler { file("/home/syslog-ng/$YEAR/$HOST/spooler-$MONTH"); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>destination
messages { file("/home/syslog-ng/$YEAR/$HOST/messages-$MONTH"); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>log {
source(src); filter(f_kern); destination(kern); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>log {
source(src); filter(f_authpriv); destination(authpriv); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>log {
source(src); filter(f_mail); destination(mail); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>log {
source(src); filter(f_cron); destination(cron); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>log {
source(src); filter(f_boot); destination(boot); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>log {
source(src); filter(f_spooler); destination(spooler); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>log {
source(src); filter(f_messages); destination(messages); };<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>syslog-ng
receive logs from about 1000 clients ,and the usage of mem by syslog-ng keeps
growing,here are a days record of the usage of mem(got by command ‘ps aux’):<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>cup %mem<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 29.9<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 30.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 30.3<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 30.5<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 30.7<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 30.9<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 31.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 31.2<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 31.4<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 31.6<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 31.9<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 32.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 32.3<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 32.4<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 32.6<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 32.8<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 33.0<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 33.2<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 33.4<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 33.5<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 33.8<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 33.9<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 34.1<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 34.3<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 34.5<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 34.6<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 34.9<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 35.0<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.5pt'>0.1 35.2<o:p></o:p></span></font></p>
<p class=MsoNormal style='layout-grid-mode:char'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US><o:p> </o:p></span></font></p>
</div>
</body>
</html>