[syslog-ng] syslog-ng overload

Balazs Scheidler bazsi at balabit.hu
Wed Dec 13 10:18:17 CET 2006


On Tue, 2006-12-12 at 21:50 +0300, Serge Torop wrote:
> Hello, all.
> 
> On my system Linux RedHat EL AS3
> 
> kernel:
> Linux 2.4.21-20.EL #1 Wed Aug 18 20:58:25 EDT 2004 i686 i686 i386 GNU/Linux
> 
> I note high loading CPU 99% by syslog-ng.
> Syslog-ng version 1.6.11 (1.6.8 too), libol 0.3.18 (0.3.16 too).
> 
> Is this possible to resolve high loading CPU problem?
> Thanks to advance.

> Swap: 1975912k av,   13060k used, 1962852k free                  181536k cached
> 
>    PID USER     PRI  NI  SIZE  RSS SHARE STAT %CPU %MEM   TIME CPU COMMAND
> 23460 root      25   0   852  852   664 R    99,8  0,1   3:36   0 syslog-ng
> 23518 root      15   0  1188 1188   848 R     0,1  0,2   0:00   0 top

First you need to find out whether this kind of load is caused by the
message load or it is some kind of bug.

You did not include log traffic information. How many messages does
syslog-ng process while eating the CPU like this? What kind of CPU do
you have? How many files are opened at a time?


-- 
Bazsi



More information about the syslog-ng mailing list