Hi,
We have been using syslog-ng for over a year now and it is working great, thanks!
One issue we face is that when we stop the process when there is some buffer, the threshold is ignored and a bunch of logs get pushed out (as much as 10 times the threshold value). This is causing problems on the receiving end as it can't handle the load. We thought the log-fifo-size parameter can help as syslog uses this parameter to store logs in memory but it is not helping.
It would be great if you can guide us.
Thanks.