Nice useless comment... With 30k logs per second it is in fact a small queue but enough for a restart of the logstash services. Von: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] Im Auftrag von Anton Koldaev Gesendet: Donnerstag, 22. November 2012 15:31 An: Syslog-ng users' and developers' mailing list Betreff: Re: [syslog-ng] Queue size in syslog-ng? Random tuning. Just make it bigger! On Thu, Nov 22, 2012 at 1:55 PM, Daniel Neubacher <daniel.neubacher@xing.com<mailto:daniel.neubacher@xing.com>> wrote: You need to configure log_fifo_size. I've set "log_fifo_size(1000000)" to get sure nothing get lost. Make sure you have some memory left free on the server :) Daniel -----Ursprüngliche Nachricht----- Von: syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu> [mailto:syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu>] Im Auftrag von Abhijeet R Gesendet: Montag, 19. November 2012 11:43 An: syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu> Betreff: [syslog-ng] Queue size in syslog-ng? Hi all, In my setup, I send logs from all the servers to a central syslog server. This syslog-ng server also has a destination on a different port which is picked up by logstash's input block. (consider it just a consumer to those messages). What if this consumer goes down? How big is the queue? Is that configurable? How do I make sure that none of the messages are missed for the time the consumer is down? -- Cheers, Abhijeet R http://blog.abhijeetr.com ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq -- Best regards, Koldaev Anton