10 Mar
2011
10 Mar
'11
6:48 p.m.
On Thu, 10 Mar 2011 19:26:15 +0100 Balazs Scheidler <bazsi@balabit.hu> wrote:
An even more high performance solution is to use batched inserts that syslog-ng currently doesn't support with its sql() destination. (e.g. LOAD FROM FILE and friends).
Perhaps it is adding necessary complexity that can be done in a separate script, but perhaps after writing X lines to a log file or simply if it can be detected that a new file is created, as suggested by Martin's 1-minute log file example, a command could be spawned that will do the bulk load of the old one? Might need to be careful to limit the number of spawned bulk loads is all. John