<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>AFAIK on systemd systems, fs file max etc are ignored. You need to set LimitNOFILE in the service unit (see systemd docs).<br>
</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of vijay amruth <vijayamruth@gmail.com><br>
<b>Sent:</b> Thursday, March 9, 2017 5:59:36 PM<br>
<b>To:</b> Syslog-ng users' and developers' mailing list<br>
<b>Subject:</b> [syslog-ng] Increase file descriptors for syslog-ng.</font>
<div> </div>
</div>
<div>
<div dir="ltr">Hello everyone, Hope you are all doing great.
<div><br>
</div>
<div>I am running into some issues with syslog-ng file descriptors, I have tried to set up ulimit -n value to 65535,</div>
<div><b><br>
</b></div>
<div><b>open files (-n) 65535</b></div>
<div><br>
</div>
<div>set the parameter to the follwoing in /etc/sysctl.conf, <b>fs.file-max = 512000</b></div>
<div><b><br>
</b></div>
<div>and tried raising the value with syslog-ng --fd-limit <number>, I get the following error</div>
<div><br>
</div>
<div>
<div>####syslog-ng --fd-limit 8192</div>
<div>WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode Please update it to use the syslog-ng 3.5 format at your time of convinience, compatibility mode can operate less efficiently in some cases. To upgrade the configuration,
please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file.;</div>
<div>WARNING: global: the default value of log_fifo_size() has changed to 10000 in syslog-ng 3.3 to reflect log_iw_size() changes for tcp()/udp() window size changes;</div>
<div>Using a global log-fetch-limit() option was removed, please use a per-source log-fetch-limit();</div>
<div>WARNING: window sizing for tcp sources were changed in syslog-ng 3.3, the configuration value was divided by the value of max-connections(). The result was too small, clamping to 100 entries. Ensure you have a proper log_fifo_size setting to avoid message
loss.; orig_log_iw_size='0', new_log_iw_size='100', min_log_fifo_size='1300000'</div>
<div><br>
</div>
<div><br>
</div>
<div>and I am unable to stop the syslog-ng service using systemctl, it immediately re-starts, I am using centOS 7.2, I have noticed few other people on the internet had the same problem, please advice, any help is appreciated.</div>
<div><br>
</div>
<div><i>OS: CentOS 7.2</i></div>
<div><i>Hardware : VM</i></div>
<div><i>Problems : 1) Unable to increase the file descriptors for syslog-ng. 2) Unable to stop the service using systemctl stop command, it automatically restarts right after with a new pid.</i></div>
<div><br>
</div>
<div><br>
</div>
</div>
<div>
<div class="gmail_signature">
<div dir="ltr">
<div>Thanks,
<div>Vijay Amrut.</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>