Recently, I started seeing dropped packets in syslog-ng. I increased the log_fifo_size to 2000 (it was 1000) and it abated the problem somewhat. But I am still seeing some dropped packets. Could I increase the log_fifo_size? Are there any other tips? Unfortunately, we are going to be adding more logging load to this loghost and I am worried that this problem might increase. Any ideas? Thanks!
On Wed, 2006-05-24 at 16:35 -0700, Vaibhav Goel wrote:
Recently, I started seeing dropped packets in syslog-ng. I increased the log_fifo_size to 2000 (it was 1000) and it abated the problem somewhat. But I am still seeing some dropped packets. Could I increase the log_fifo_size? Are there any other tips? Unfortunately, we are going to be adding more logging load to this loghost and I am worried that this problem might increase. Any ideas?
The most important part in addressing this problem is finding out which destination drops packets. syslog-ng 1.6.x only gave a global counter. You might have a slow destination (like /dev/xconsole) whereas your normal log flow works fine. If your primary log output is slow, you could switch to 1.9.11 which includes log message flow control. -- Bazsi
participants (2)
-
Balazs Scheidler
-
Vaibhav Goel