[syslog-ng] 答复: 答复: 答复: why dose the usage of mem by syslog-ng keep growing?

[liuruihong]

In addition  the syslog-ng receive logs from about 1000 clients  when the
usage of mem by syslog-ng keep growing
I think maybe the reason of the problem is that there are so many log files
being writted .
I do another test ,using the same verson and  the configure file,but
receives logs from only one client,and usage of mem by syslog-ng doesn`t
keep growing.
But I don`t know the relationship between them.

-----邮件原件-----
发件人: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] 代表 liuruihong
发送时间: 2007年9月25日 14:23
收件人: 'Syslog-ng users' and developers' mailing list'
主题: [syslog-ng] 答复: 答复: why dose the usage of mem by syslog-ng keep
growing?

The   version of syslog-ng is 2.0.5
the configure file  as follows：

options { use_dns(no); create_dirs(yes);ts_format(iso); }; 
#options { log_fifo_size(3000); };
source src { udp(ip(0.0.0.0) port(514) ); };

filter f_kern { facility(kern); };
filter f_authpriv { facility(auth,authpriv); };
filter f_mail { facility(mail); };
filter f_cron { facility(cron); };
filter f_boot { facility(local7); };
filter f_spooler { facility(uucp, news) and level(crit..emerg); };
filter f_messages { level(info..emerg) and not facility(authpriv, cron,
mail); };

#destination kern { file("/home/syslog-ng/$YEAR/$HOST/kernel-$MONTH"); };
#destination authpriv { file("/home/syslog-ng/$YEAR/$HOST/secure-$MONTH");
};
#destination mail { file("/home/syslog-ng/$YEAR/$HOST/maillog-$MONTH"); };
#destination cron { file("/home/syslog-ng/$YEAR/$HOST/cron-$MONTH"); };
#destination boot { file("/home/syslog-ng/$YEAR/$HOST/boot.log-$MONTH"); };
#destination spooler { file("/home/syslog-ng/$YEAR/$HOST/spooler-$MONTH");
};
#destination messages { file("/home/syslog-ng/$YEAR/$HOST/messages-$MONTH");
};
destination kern { file("/home/syslog-ng/$YEAR/$HOST/kernel-$HOUR"); };
destination authpriv { file("/home/syslog-ng/$YEAR/$HOST/secure-$HOUR"); };
destination mail { file("/home/syslog-ng/$YEAR/$HOST/maillog-$HOUR"); };
destination cron { file("/home/syslog-ng/$YEAR/$HOST/cron-$HOUR"); };
destination boot { file("/home/syslog-ng/$YEAR/$HOST/boot.log-$HOUR"); };
destination spooler { file("/home/syslog-ng/$YEAR/$HOST/spooler-$HOUR"); };
destination messages { file("/home/syslog-ng/$YEAR/$HOST/messages-$HOUR");
};

log { source(src); filter(f_kern); destination(kern); };
log { source(src); filter(f_authpriv); destination(authpriv); };
log { source(src); filter(f_mail); destination(mail); };
log { source(src); filter(f_cron); destination(cron); };
log { source(src); filter(f_boot); destination(boot); };
log { source(src); filter(f_spooler); destination(spooler); };
log { source(src); filter(f_messages); destination(messages); };
-----邮件原件-----
发件人: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] 代表 Balazs Scheidler
发送时间: 2007年9月25日 14:15
收件人: Syslog-ng users' and developers' mailing list
主题: Re: [syslog-ng] 答复: why dose the usage of mem by syslog-ng keep
growing?

On Tue, 2007-09-25 at 11:11 +0800, liuruihong wrote:
> Here are the actual memory footprint of syslog-ng,ps`s output: 
> Time interval : Mon Sep 24 18:55:01  to  Tue Sep 25 10:50:01 
> root     26087  0.2  0.0 10604 5292 ?        Ss   18:29   0:00 syslog-ng
> root     26087  0.1  0.0 10604 5292 ?        Rs   18:29   0:00 syslog-ng
> root     26087  0.1  0.1 13988 8748 ?        Ss   18:29   0:01 syslog-ng

This seems to be a lot indeed. Can you send us your configuration file
to see what might be specific in your deployment? And could you also
tell us the version of syslog-ng you are using?

If this information is not enough to narrow down the problem I might
need a core file of syslog-ng, but let's see the info first.

> root     26087  0.1  0.1 17112 11804 ?       Ss   18:29   0:02 syslog-ng
> Mon Sep 24 18:55:01 CST 2007
-- 
Bazsi

_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html



_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html