<p dir="ltr">Hi,</p>
<p dir="ltr">You dont need to bother with log-fetch-limit() as that parameter is there to avoid starvation if a connection is continuously sending messages without a pause. This is needed as a single thread handles multiple connections and if one sends messages continuously the rest wouldnt get a chance.</p>
<p dir="ltr">If all input connections send a single message then I wouldnt bother with so-rcvbuf either. And not with TCP anyway.</p>
<p dir="ltr">You might want to increase max-connections though to accept potential peaks.</p>
<p dir="ltr">Sending one message per TCP connection is not really ideal performance wise though, 250 msg/sec is not much if connections are kept alive. Isn't running syslog-ng or something else on the client feasible? One that would keep the connection for longer term?</p>
<div class="gmail_quote">On Nov 20, 2015 4:48 AM, "Al Itchon" <<a href="mailto:AItchon@boardreader.com">AItchon@boardreader.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div>
<p class="MsoNormal">I have about 1000 servers sending tcp messages through a call to /dev/tcp to a port on my syslog-ng server. I’m assuming each call to /dev/tcp is a single connection and a single message, so am I correct that the log_fetch_limit should
be set to 1 since it applies to each connection?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Also, should I bother adjusting the so-rcvbuf? I know the manual mentions that if using UDP, the receive buffer should be increased. I’m using TCP and my message rate is about 250 messages/sec.<u></u><u></u></p>
</div>
</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>