Chuck and Sander thank you for responding and taking the time to provide me feed back. This is encouraging news. That's quite the environment you've got there Chuck. 3000 hosts! I will start with 400-500 and may end up with about 1000 in the end if all goes well. I am going to setup syslog-ng in a test environment first and take it for a spin. I'll probably be back with more specific questions later.
Thanks again,
George Horvath
Chuck Kelly wrote:
We have syslog-ng running on Solaris 8. Multiple platforms are logging in
including Linux, HP, IBM, and Windows. Balazs and Nate Campi have both been
excellent sources of information. www.campin.net.Upgrading is as easy as downloading and compiling the new binary and pushing
out to the central log hosts. The hosts reporting in still run the regular
syslogd for now.Stability has been very good. Although certain versions have had issues,
Balazs has done a good job getting patches out quickly to improve
stabilization.On one of our central log hosts, which has about 3000 hosts reporting in, we
did note performance issues which was a DNS caching issue that was fixed. We
also made our loghost DNS cache servers to further improve performance.Due to certain functionality requirements, we are using the 1.5.x release.
Overall we are very happy with the product.