I imagine a config that large has got to make syslog-ng really slow, and I cant imagine why it would need to be that large in the first place.
Do you have any sort of ulimit in place controlling memory? (ulimit -m on most shells)
Are you actually running out of memory (watch top while the process is starting up)?
The only other case I can think that would cause this is an internal limit in the code that prevents it from using more than a certain amount, and that I have no clue about.

-Patrick

Sent: Mon Nov 08 2010 17:33:35 GMT-0700 (Mountain Standard Time)
From: Mukarram Syed <msyed@walmart.com>
To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>
Subject: Re: [syslog-ng] memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347

I was migrating from syslog-ng-1.6 to a new version of syslog-ng in a veritas cluster.  The original config file has >5000 lines and we want to keep it that way since it’s Production.

I got around it using syslog-ng-2.0 but 3.0 did not work due to this error.

 

Thanks for the response.

 

# mukarram

 

From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Patrick H.
Sent: Monday, November 08, 2010 4:31 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347

 

You seriously have a config thats 5000+ lines??? May I ask why?

-Patrick

Sent: Mon Nov 08 2010 16:54:45 GMT-0700 (Mountain Standard Time)
From: Mukarram Syed <msyed@walmart.com>
To: 'syslog-ng@lists.balabit.hu' <syslog-ng@lists.balabit.hu>
Subject: [syslog-ng] memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf    at line 5347

Hi ,

I am getting the following error when starting syslog-ng.conf file which has more than 5000 lines in it and getting the following error:

 

# service syslog-ng start

memory exhausted in /opt/syslog-ng/etc/syslog-ng.conf at line 5347.

 

syslog-ng documentation: http://www.balabit.com/support/documentation/?product=syslog-ng

mailing list: https://lists.balabit.hu/mailman/listinfo/syslog-ng

                                                         [FAILED]

 

 

When I truncate the file to < 5000 lines it starts up fine.

 

This is running version syslog-ng-3.0.8-1.rhel5.x86_64

Mailing list does not have any clues to it.

Anything in the syslog-ng.conf file that needs to be done to accept more lines?

Any ideas would be appreciated.

 

Thanks

 

# mukarram

 

Mukarram Syed

 

 


  
 
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html
 
  

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html