<div dir="ltr">Have you been able to isolate what is dropping the packets? If it is the kernel / driver (netstat -su) then tuning the app probably won't help much.<div><br></div><div>You might look at "pinning" the resources if you can do that in your virtual environment.</div><div><br></div><div>If you have load balancers available, you might be better off to simply point the UDP syslogs at a virtual IP and have the load balancer distribute across a pool of syslog servers.</div><div><br></div><div>Good luck,</div><div>Jim</div><div><br><br><div class="gmail_quote"><div dir="ltr">On Wed, Sep 12, 2018 at 1:27 PM vijay amruth <<a href="mailto:vijayamruth@gmail.com">vijayamruth@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thank you, Fabien.<div>I have tuned parameters at OS level, these being VMs didn't help much, can this be set at app level? if so, how?</div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Sep 12, 2018 at 7:09 AM Fabien Wernli <<a href="mailto:wernli@in2p3.fr" target="_blank">wernli@in2p3.fr</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Vijay,<br>
<br>
We're running 3.9.1 too with UDP.<br>
Have you tried increasing so-rcvbuf?<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="m_1193849363994785342gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Thanks,<div>Vijay Amrut.</div></div></div></div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div></div></div>