[syslog-ng] syslog-ng droping events

[Arya, Manish Kumar]

actually this was cuz of limitation on number of
opened  files in solaris, i have increated it from 256
to 65536


i see one more error 

10.11.2006 09:46:39 syslog-ng syslog err Connection
broken to AF_INET(XXXXXXX:514), reopening in 10
seconds
10.11.2006 09:46:49 syslog-ng syslog err io.c:
do_write: write() failed (errno 146), Connection
refused
10.11.2006 09:46:49 syslog-ng syslog err Connection
broken to AF_INET(XXXXXX:514), reopening in 10 seconds
10.11.2006 09:46:59 syslog-ng syslog err io.c:
do_write: write() failed (errno 146), Connection
refused
10.11.2006 09:46:59 syslog-ng syslog err Connection
broken to AF_INET(XXXXXXXX:514), reopening in 10
second


-manish

--- Alexander Clouter <ac56 at soas.ac.uk> wrote:

> Hi,
> 
> Arya, Manish Kumar <m.arya at yahoo.com> [20061110
> 01:11:54 -0800]:
> >
> > Hi,
> > 
> >    I have 3 syslog listeners (solaris 10 )
> collecting
> > log events from about 20,000 devices and fwding
> them
> > on a central syslog box (solaris 10, 16 gb RAM and
> 3TB
> > SAN storage) . the central syslog box stores them
> in
> > oracle db and on filesystem.
> > 
> >    I notice that events from many devices are
> being
> > droped on central syslog box.
> >    I thought it might be because of udp protocol,
> but
> > even after enabling tcp its droping events. I can
> see
> > that events come on listeners boxes (I created
> temp
> > file logs there)
> > 
> > please tell me what could be missing.
> > 
> Munching through the mailing list archives ;)
> 
>
https://lists.balabit.hu/pipermail/syslog-ng/2006-May/008836.html
> 
> Sounds like, what DB monkeys call, 'SQL Exhaustion'
> or something.  You SQL 
> database is slowing up the whole process...mainly as
> SQL is not suitable for 
> *live* realtime processing, thats my opinion though.
> 
> Cheers
> 
> Alex
> 
> > Regards,
> > -Manish
> > 
> > 
> >  
> >
>
____________________________________________________________________________________
> > Want to start your own business?
> > Learn how on Yahoo! Small Business.
> > http://smallbusiness.yahoo.com/r-index
> > _______________________________________________
> > syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> >
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Frequently asked questions at
> http://www.campin.net/syslog-ng/faq.html
> > 
> > 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at
> http://www.campin.net/syslog-ng/faq.html
> 
> 



 
____________________________________________________________________________________
Cheap talk?
Check out Yahoo! Messenger's low PC-to-Phone call rates.
http://voice.yahoo.com