Dropped messages and UDP buffer sizes
Hello! We are trying to use syslog-ng to log messages from several servers. We get quite a few "dropped" messages from syslog-ng saying between 70 and 290 are being dropped each time. According to the list, it sounds like we need to increase out UDP receive buffer size. We are running suse 8.2 on a Pentium II 266 and a SCSI HD. The machine had 64mb in it, and we increased this to 128mb which didn't help. We get around the same number of "dropped" messages. We are logging from 5 machines, and getting ~9500 messages a day and we are making it log to just /var/log/messages at the moment. The network card is a 3com 3c905b (cyclone). Watching top for memory and processor usage doesn't indicate that anything is using a lot of either. Do we need to increase the UDP receive buffer? if so, where do we find it? it sounds worryingly like a kernel recompile job! Any help would be appreciated. thanks, chris -- The content of this e-mail is confidential, may contain privileged material and is intended solely for the recipient(s) named above. If you receive this in error, please notify Software AG immediately and delete this e-mail. Software AG (UK) Limited Registered in England & Wales 1310740 Registered Office: Hudson House, Hudson Way, Pride Park, Derby DE24 8HS
On Thu, Jul 10, 2003 at 09:39:18AM +0100, Clemson, Chris wrote:
Hello! We are trying to use syslog-ng to log messages from several servers. We get quite a few "dropped" messages from syslog-ng saying between 70 and 290 are being dropped each time. According to the list, it sounds like we need to increase out UDP receive buffer size.
If syslog-ng reports dropped messages in itself, increasing UDP receive buffer will not help, as syslog-ng itself has already pulled the message. Message drops within syslog-ng might happen because one or more of the destinations process messages slower than the sources. If you only have file destinations then increasing log_fifo_size() might help. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
participants (2)
-
Balazs Scheidler
-
Clemson, Chris