I plan on using 1 server with Syslog-ng to maintain all of the log files for my firewalls. I want to make sure I don't overload this server. This server is a PIII 800Mhz with 512MB ram. At this point the amount of data I'll be sending to syslog-ng will be approx 2GB daily. Can anyone tell me how what experiences they've had with this type of scenario? Is there a limit to the amount of devices syslog-ng can handle?
Joshua Scott Security Systems Analyst Jacobs Engineering Group IS - Network Services 1111 South Arroyo Parkway Pasadena, California, 91105 Office: (626) 568-7024 Mobile: (866) 810-5234 Fax: (626) 578-6967
On Fri, Mar 30, 2001 at 12:37:07PM -0500, Scott, Joshua wrote:
I plan on using 1 server with Syslog-ng to maintain all of the log files for my firewalls. I want to make sure I don't overload this server. This server is a PIII 800Mhz with 512MB ram. At this point the amount of data I'll be sending to syslog-ng will be approx 2GB daily. Can anyone tell me how what experiences they've had with this type of scenario? Is there a limit to the amount of devices syslog-ng can handle?
My central linux loghost handles about 50-60 hosts and usually the total transfer is about 500 megs/day, but when the mail server freaked out once I received over 2 gigs from one host in a matter of hours. Syslog-ng never had any trouble - but ext2fs stopped logging when the individual logfiles hit 2 gigs ;) I'd say you'll be fine. -- Nate
participants (2)
-
Nate Campi
-
Scott, Joshua