[syslog-ng] Evaluation for no. of sessions handled by Syslog-ng!

[Jim Hendrick]

Really need more details. 

How many events per second do you expect?

What is the network topology between them and the server?

What kind of server? Any other load on it?

If network is not an issue, and the server is reasonably current (e.g. 1-2
CPU, 2+GB RAM, recent Linux not running a lot else, etc.) The 100 servers
should be OK (unless they are heavily logging debug traffic from
applications, etc.) but the network devices are the big wildcard. 100
routers logging moderately should be fine. 100 FWs or IDSs may be more than
you want to send to a single server.

Again, w/o more details, this is just a guess.

Jim

> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu 
> [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Wilson Lai
> Sent: Wednesday, October 03, 2007 4:10 AM
> To: syslog-ng
> Subject: [syslog-ng] Evaluation for no. of sessions handled 
> by Syslog-ng!
> 
> 
> Dear ALL, 
> 
>           If I have 100 servers and 100 network devices which 
> want to collect all the logs 
> 
>        to a Syslog-Ng Centralized server, would It be 
> possible that the Syslog-NG could handle 
> 
>        such numerous sessions? 
> 
>           I am using the MYSQL DB. 
> 
>           Thanks. 
> 
>   
> 
> Regards, 
> 
> Wilson Lai 
> 
> System Engineer 
> 
> IT Dept., SJM 
> 
> Office * : (853)2978585 
> 
> Mobile * : (853)66506709 
> 
> Email *: : wilsonlai at macausjm.com 
> 
>   
> 
>