[syslog-ng] Syslog-ng dropped packets.

[Balazs Scheidler]

On Wed, 2006-05-24 at 16:35 -0700, Vaibhav Goel wrote:
> Recently, I started seeing dropped packets in syslog-ng.  I increased
> the log_fifo_size to 2000 (it was 1000) and it abated the problem
> somewhat.  But I am still seeing some dropped packets.  Could I
> increase the log_fifo_size?  Are there any other tips?  Unfortunately,
> we are going to be adding more logging load to this loghost and I am
> worried that this problem might increase.  Any ideas?

The most important part in addressing this problem is finding out which
destination drops packets. syslog-ng 1.6.x only gave a global counter.

You might have a slow destination (like /dev/xconsole) whereas your
normal log flow works fine.

If your primary log output is slow, you could switch to 1.9.11 which
includes log message flow control.

-- 
Bazsi