Hi! Traiano Welcome <Traiano.Welcome@mtnbusiness.co.za> writes:
I've been seeing the following in the messages log of my freebsd syslog server for quite some time now:
--- Mar 20 12:19:12 syslog2 syslog-ng[35313]: I/O error occurred while writing; fd='12', error='No buffer space available (55)' Mar 20 12:19:12 syslog2 syslog-ng[35313]: Connection broken; time_reopen='60' Mar 20 12:19:12 syslog2 syslog-ng[35313]: I/O error occurred while writing; fd='13', error='No buffer space available (55)' Mar 20 12:19:12 syslog2 syslog-ng[35313]: Connection broken; time_reopen='60' ---
These happen at a frequency of about 7 per minute on average. See attached trend graphs for an idea of the volume of traffic we're doing, as well as the memory and cpu utilisation trends on this server during this period.
It would be useful to know what fd 12 and 13 are, that might give us a hint or two. Though, I suppose, they're an UDP destination.
My question is: What does this error mean, and how can I resolve it?
With syslog-ng 2.0, I have no idea, I'm afraid. I would strongly suggest upgrading to 3.2 or 3.3. With those two, you can increase various queue and buffer sizes within the config that can perhaps help. The same settings migth be available in 2.0 too, but I haven't looked at that in ages. -- |8]