Hi, Just a thought: do you really need to keep that many files open simultaneously? Can't you use macros (e.g., $HOUR or even $MIN) to lower the number of files needed in parallel? Robert Rory Toma wrote:
OK, I have a question. I've found that it is good to run several syslog-ng processes when dealing with tens of thousands of log files.
So, I'd like to receive everything in one syslog-ng process, and forward them, via localhost, to about a hundred or so different syslog-ng processes on the same machine. Is there a good way to write a (log; filter; dest;) line that would round-robin between a bunch of destinations in a single line? ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html