Hi,
When I try to use loggen with more than ~20 active connections I get the following error:
"Send error Connection reset by peer, results may be skewed."
The network source has max_connections(128) already configured, so it should be handle that many connections without any trouble.
Do you have any suggestions where to look either in syslog-ng or at OS level? It is Ubuntu 17.10 and syslog-ng 3.11