Really need more details. How many events per second do you expect? What is the network topology between them and the server? What kind of server? Any other load on it? If network is not an issue, and the server is reasonably current (e.g. 1-2 CPU, 2+GB RAM, recent Linux not running a lot else, etc.) The 100 servers should be OK (unless they are heavily logging debug traffic from applications, etc.) but the network devices are the big wildcard. 100 routers logging moderately should be fine. 100 FWs or IDSs may be more than you want to send to a single server. Again, w/o more details, this is just a guess. Jim
-----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Wilson Lai Sent: Wednesday, October 03, 2007 4:10 AM To: syslog-ng Subject: [syslog-ng] Evaluation for no. of sessions handled by Syslog-ng!
Dear ALL,
If I have 100 servers and 100 network devices which want to collect all the logs
to a Syslog-Ng Centralized server, would It be possible that the Syslog-NG could handle
such numerous sessions?
I am using the MYSQL DB.
Thanks.
Regards,
Wilson Lai
System Engineer
IT Dept., SJM
Office * : (853)2978585
Mobile * : (853)66506709
Email *: : wilsonlai@macausjm.com