[syslog-ng] Message loss (probably) within syslog-ng

[Mike]

On Sun, 5 Mar 2006, Vincent Haverlant wrote:

> Hi,
>
> I get a kind of message loss trouble like in some previous message with the 
> subject "remote logging not reliable", but in his case, the remote logging 
> was done other tcp and this was pointed as the probable cause of message 
> loss. In my case only udp is involved.
>

is your OS dropping packets before syslog-ng gets a chance to grab them?

maybe run this command:

netstat -su

and look for dropped packets.

if you see some, then you can increase your UDP buffer size to help smooth 
this out in the case of bursts.

Mike