Hi !<br><br>I have a question about the use of udp, unix-stream or pipe. I would like to forward a syslog message to the same syslog server like this :<br><br>| log {<br>| source (s_r_udp); (<-- listen on UDP/514)<br>
|<br>| filter (....);<br>| filter (....);<br>| parser (...);<br>|<br>| destination (d_local_syslog); (<-- send the message to a local syslog by using unix-stream, udp or pipe mecanism)<br>| };<br><br>
(...)<br><br>| log {<br>| source (s_local_syslog); (<--- here I receive the messages sent by the "d_syslog_loop")<br>| <br>| filter (...);<br>| filter (...);<br>| parser (...);<br>| <br>| destination (d_remote_syslog);<br>
<br>I'm looking for the better way to send syslog message to the same syslog server : which mecanism provides the better performances : pipe, udp (by using network) or unix-stream ?<br>Maybe the "pipe" is the better solution ?...<br>
<br>I'm using the syslog-ng OSE 3.1.2 on CentOS.<br>
<br>Regards,<br><br>Yann I.<br>