<p dir="ltr">Google for Log-fifo-size</p>
<div class="gmail_quote">On May 3, 2013 7:47 AM, &quot;Abhijeet Rastogi&quot; &lt;<a href="mailto:abhijeet.1989@gmail.com">abhijeet.1989@gmail.com</a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi all,<br>
<br>
I&#39;ve source defined as:<br>
<br>
source s_sys {<br>
        file (&quot;/proc/kmsg&quot; program_override(&quot;kernel: &quot;));<br>
        unix-stream (&quot;/dev/log&quot;);<br>
        internal();<br>
        udp(ip(0.0.0.0) port(514));<br>
};<br>
<br>
And one of the destination as:<br>
<br>
destination d_logstash { tcp( &quot;127.0.0.1&quot; port(515)<br>
template(t_both_timestamps) flush_lines(10)); };<br>
<br>
Problem is when my consumer is down, I can see messages being dropped<br>
in &quot;syslog-ng-ctl stats&quot;.<br>
<br>
How can I avoid this at the expense of memory (like a queueing<br>
mechanism or something)?<br>
<br>
<br>
--<br>
Regards,<br>
Abhijeet Rastogi (shadyabhi)<br>
<a href="http://blog.abhijeetr.com" target="_blank">http://blog.abhijeetr.com</a><br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>