Hi Balas and guys, --- Balazs Scheidler <bazsi@balabit.hu> wrote:
syslog-ng has a FIFO in memory where it stores messages. The contents of this fifo is not persistent (as it is in memory), thus if you stop and restart syslog-ng the contents of this fifo is lost. Another thing to note is that if this FIFO becomes full, syslog-ng will start dropping messages (which it reports using the STATS message). So assuming FIFO doesnt become full, I can assume messages that failed to send will be requeued to be sent ?
you can manually control the fifo size using log_fifo_size() global and per-destination option. Does it affect perforamnce greatly if I increase the size ? (Not that I will, since my traffic will be low), or will it be just a memory usage hit thats all ?
Elvin -