6 Mar
2012
6 Mar
'12
2:43 p.m.
For a benchmark, I have stressed (10 000 to 20 000msg/sec) a syslogd server which transmits all logs it received to a Syslog-NG server over udp. I was able to reach a score of 90% of lost messages.
udp is very good way to have problem with your log management solution I think.
That doesn't sound right at all. We get much better performance with UDP: zero drops at around 15k/sec with a lot of bursting to over 20k.