Hi, You should take a look at https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.8-guid... which has some performance tuning tips. And while it's for syslog-ng PE and quite old, this performance guideline also useful: https://www.balabit.com/documents/pdf/syslog-ng-pe-v5.0-performance-whitepap... Bye, Peter Czanik (CzP) <peter.czanik@balabit.com> Balabit / syslog-ng upstream http://czanik.blogs.balabit.com/ https://twitter.com/PCzanik On Tue, Sep 27, 2016 at 10:41 PM, Clayton Dukes <cdukes@logzilla.net> wrote:

I have searched high and low for actual configs on how to do this, but can't nail down anything solid.

Does anyone have a good document or site I can reference which outlines all the details of getting syslog-ng to receive at 100k eps?

Including things like what is needed to add/change in sysctl.conf, etc.

I've found pages, like a blog entry by Etsy claiming it, but they left out the details on how to actually do it unfortunately.

*Clayton Dukes* / Founder and CTO (818) 869-4552/ cdukes@logzilla.net

*LogZilla Corporation*

http://www.logzilla.net

____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq