<p dir="ltr">That means that the output queue toward the server became full which indicates that the bottleneck was at the server. You can increase log_fifo_size if this only happens during peaks but that doesn't help if this is permanent. Flow control can also help but that propagates the stall towards applications, eg those will also stall.</p>
<div class="gmail_quote">On Apr 26, 2013 12:05 PM, "Davide D'Amico" <<a href="mailto:davide.damico@gmail.com">davide.damico@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><br><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
------------------------------<br>
<br>
Message: 3<br>
Date: Fri, 26 Apr 2013 11:29:39 +0200<br>
From: Balazs Scheidler <<a href="mailto:bazsi77@gmail.com" target="_blank">bazsi77@gmail.com</a>><br>
Subject: Re: [syslog-ng] Configuration for a centralized syslog-ng<br>
server<br>
To: "Syslog-ng users' and developers' mailing list"<br>
<<a href="mailto:syslog-ng@lists.balabit.hu" target="_blank">syslog-ng@lists.balabit.hu</a>>, <a href="mailto:eh@gmail.com" target="_blank">eh@gmail.com</a><br>
Message-ID:<br>
<<a href="mailto:CAKcfE%2BbvXksZFdz77SkN8VCrmH15wwbTvUk8xJeWFLEwHpay7w@mail.gmail.com" target="_blank">CAKcfE+bvXksZFdz77SkN8VCrmH15wwbTvUk8xJeWFLEwHpay7w@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
How do you know messages are dropped?</blockquote><div><br></div><div>Using freq_stats :)</div><div><br></div><div>Anyway, I found the issue that wasn't related to syslog-ng.</div><div>I had the syslog zfs partition on 92% so, after removing a lot of old files, everything went fine. </div>
</div><div><br></div>-- <br>d.
</div></div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>