<div dir="ltr">You might try my ELSA project (<a href="http://enterprise-log-search-and-archive.googlecode.com">enterprise-log-search-and-archive.googlecode.com</a>) which can be run in archive-only mode. It uses MySQL's archive storage engine for compression which gives you a 20:1 compression ratio and should be able to handle 50k events/sec, including proper rotation.</div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Feb 18, 2013 at 9:20 AM, C. L. Martinez <span dir="ltr"><<a href="mailto:carlopmart@gmail.com" target="_blank">carlopmart@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Better than brtfs, maybe FreeBSD/ZFS is best option ... IMO.<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
On Mon, Feb 18, 2013 at 3:14 PM, Gergely Nagy <<a href="mailto:algernon@balabit.hu">algernon@balabit.hu</a>> wrote:<br>
> Daniel Neubacher <<a href="mailto:daniel.neubacher@xing.com">daniel.neubacher@xing.com</a>> writes:<br>
><br>
>> Thanks for your detailed responses. The external compression was my<br>
>> last resolution but now I've maybe found my final solution. I've<br>
>> installed Kernel 3.2 & Btrfs with zlib compression. The fs isn't<br>
>> marked as stable yet but I've heard some positive responses from<br>
>> fellow admins. Right now I've got a real time compression rate of 84%<br>
>> without any cpu problems. I hope my long term test is running fine but<br>
>> right now I'm pretty happy.<br>
><br>
> That's an interesting solution aswell, thanks for sharing it! I was<br>
> already considering BTRFS for the next experimental servers I'll be<br>
> bringing up, this adds one more point in its favour. :)<br>
><br>
> --<br>
> |8]<br>
><br>
> ______________________________________________________________________________<br>
> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
> Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
><br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</div></div></blockquote></div><br></div>