I imagine a config that large has got to make syslog-ng really slow, and I cant imagine why it would need to be that large in the first place. -its pulling syslog info from about 1500 servers. Do you have any sort of ulimit in place controlling memory? (ulimit -m on most shells) # ulimit -m Unlimited Are you actually running out of memory (watch top while the process is starting up)? -I haven't tried that...it's a good idea though. The only other case I can think that would cause this is an internal limit in the code that prevents it from using more than a certain amount, and that I have no clue about. -possibly...but how come the older versions of syslog-ng work? Maybe a new addition to syslog-ng-3.0. Thanks # mukarram From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Patrick H. Sent: Monday, November 08, 2010 4:41 PM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347 I imagine a config that large has got to make syslog-ng really slow, and I cant imagine why it would need to be that large in the first place. Do you have any sort of ulimit in place controlling memory? (ulimit -m on most shells) Are you actually running out of memory (watch top while the process is starting up)? The only other case I can think that would cause this is an internal limit in the code that prevents it from using more than a certain amount, and that I have no clue about. -Patrick Sent: Mon Nov 08 2010 17:33:35 GMT-0700 (Mountain Standard Time) From: Mukarram Syed <msyed@walmart.com><mailto:msyed@walmart.com> To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><mailto:syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347 I was migrating from syslog-ng-1.6 to a new version of syslog-ng in a veritas cluster. The original config file has >5000 lines and we want to keep it that way since it's Production. I got around it using syslog-ng-2.0 but 3.0 did not work due to this error. Thanks for the response. # mukarram From: syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu> [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Patrick H. Sent: Monday, November 08, 2010 4:31 PM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347 You seriously have a config thats 5000+ lines??? May I ask why? -Patrick Sent: Mon Nov 08 2010 16:54:45 GMT-0700 (Mountain Standard Time) From: Mukarram Syed <msyed@walmart.com><mailto:msyed@walmart.com> To: 'syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>' <syslog-ng@lists.balabit.hu><mailto:syslog-ng@lists.balabit.hu> Subject: [syslog-ng] memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347 Hi , I am getting the following error when starting syslog-ng.conf file which has more than 5000 lines in it and getting the following error: # service syslog-ng start memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347. syslog-ng documentation: http://www.balabit.com/support/documentation/?product=syslog-ng mailing list: https://lists.balabit.hu/mailman/listinfo/syslog-ng [FAILED] When I truncate the file to < 5000 lines it starts up fine. This is running version syslog-ng-3.0.8-1.rhel5.x86_64 Mailing list does not have any clues to it. Anything in the syslog-ng.conf file that needs to be done to accept more lines? Any ideas would be appreciated. Thanks # mukarram Mukarram Syed ________________________________ ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html ________________________________ ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html