[syslog-ng]Syslog Logging Delay

[Balazs Scheidler]

> poll([{fd=12, events=0}, {fd=11, events=0}, {fd=21, events=0}, {fd=10,
> events=0}, {fd=22, events=POLLIN}, {fd=14, events=0}, {fd=13,
> events=POLLIN}, {fd=17, events=0}, {fd=16, events=POLLIN}, {fd=15,
> events=0}, {fd=9, events=0}, {fd=8, events=POLLIN}, {fd=7, events=0},
> {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=4, events=POLLIN},
> {fd=3, events=POLLIN}], 17, 100) = 0
> poll([{fd=12, events=0}, {fd=11, events=0}, {fd=21, events=0}, {fd=10,
> events=0}, {fd=22, events=POLLIN}, {fd=14, events=0}, {fd=13,
> events=POLLIN}, {fd=17, events=0}, {fd=16, events=POLLIN}, {fd=15,
> events=0}, {fd=9, events=0}, {fd=8, events=POLLIN}, {fd=7, events=0},
> {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=4, events=POLLIN},
> {fd=3, events=POLLIN, revents=POLLIN}], 17, 4000) = 1
> read(3,
> 
> I don't know.  Nothing to correlate it to stopping at 10:10:00 p.m. EST
> last night though...
> 
> I'm just not seeing anything that sticks out to indicate where a problem
> might be.
> 
> Can someone who is running a central logging server indicate how they have
> configured syslog-ng, as far as log_fifo_size, garbage collection options,
> number of objects alive at any one time after running for a while, sync
> options?  I would appreciate it, greatly.

something seems to block syslog-ng. DNS maybe? syslog-ng issues a dns lookup
for every message if DNS is turned on. What is fd=3 ? It indicates
readability, but as it seems reading from it blocks.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1