[syslog-ng] apache logs over syslog-ng sychronized

[Balazs Scheidler]

On Wed, 2008-09-03 at 17:31 +0300, Eli Shemer wrote:
> Follow-freq(1) 
> log-fifo-size(10) 
> log-fetch-limit(10) 
> 
> does it sound like a viable setup?
> Basically I do not need to be completely synchronized to the other servers to the second but if I schedule syslog-ng to only transfer the data every minute or so then I'm really bound to have data loss cause I don’t know what to set the buffer variables to.
> Is there some norm in this situation ?
> 
> I'm using syslog-ng 2.0.0-1etch1 on debian 4
> It seems to work so far.
> 
> Thanks.

This means that you transfer 10 lines every second to the central
server.

The fifo size will probably not be enough, you should use at least 1000
as your destination fifo.

ps: syslog-ng 2.0.0 is quite old. you should upgrade that.

-- 
Bazsi