[syslog-ng] Tuning help?

Cole Tuininga cole.tuininga at gmail.com
Wed Nov 21 22:02:31 CET 2007


On Nov 21, 2007 3:23 PM, K K <kkadow at gmail.com> wrote:
> The unix-dgram driver can (will) be lossy if messages are being
> written faster than they are being read out by syslog-ng,

This makes sense.

> You might consider increasing flush_lines and log_fetch_limit until
> the loss stops.

Interestingly, this seemed to *increase* the frequency of the drops.

> Does FreeBSD have a kernel tunable for unix datagram buffers?

Indeed it does, and this helped greatly.  I changed it from 4K to 64K
and that fixed the problem consistently with my little test script.
Thanks for the idea.

-- 
Cole Tuininga
http://www.tuininga.org/


More information about the syslog-ng mailing list