[syslog-ng]Message retension period

Jim Mozley syslog-ng@lists.balabit.hu
Thu, 16 Sep 2004 16:14:06 +0100


Balazs Scheidler wrote:

> syslog-ng keeps those messages in a memory buffer, whose size is
> controlled using the log_fifo_size() global/per-destination parameter.

Thank you, this makes sense.

As a follow-up question I'd like to ask what happens if the number of 
lines set by this parameter is exceeded.

Are messages dropped or the oldest first overwritten?

I assume this is recorded on the server that dropped the message with 
the STATS: dropped message?

Jim Mozley