Re: [syslog-ng] Tuning help?

On Nov 21, 2007 3:23 PM, K K <kkadow@gmail.com> wrote:

The unix-dgram driver can (will) be lossy if messages are being written faster than they are being read out by syslog-ng,

This makes sense.

You might consider increasing flush_lines and log_fetch_limit until the loss stops.

Interestingly, this seemed to *increase* the frequency of the drops.

Does FreeBSD have a kernel tunable for unix datagram buffers?

Indeed it does, and this helped greatly. I changed it from 4K to 64K and that fixed the problem consistently with my little test script. Thanks for the idea. -- Cole Tuininga http://www.tuininga.org/