No subject


Tue Sep 8 20:42:31 CEST 2009 

syslog-ng 29232 root    3r  FIFO                0,6            
214383200 pipe<br>
syslog-ng 29232 root&nbsp;&nbsp;&nbsp; 5u&nbsp; unix 0xffff81022f7bf680&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
214383203 /var/lib/syslog-ng/syslog-ng.ctl<br>
syslog-ng 29232 root&nbsp;&nbsp;&nbsp; 7u&nbsp; IPv4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 214383201&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
TCP 127.0.0.1:516 (LISTEN)<br>
syslog-ng 29232 root&nbsp;&nbsp;&nbsp; 9u&nbsp; IPv4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 214383285&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
TCP 127.0.0.1-&gt;127.0.0.1:28061 (ESTABLISHED)<br>
<br>
<br>
</font></font><br>
Sent: Thursday, April 01, 2010 7:33:12 AM<br>
From: Martin Holste <a class="moz-txt-link-rfc2396E" href="mailto:mcholste at gmail.com">&lt;mcholste at gmail.com&gt;</a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:cdukes at cdukes.com">cdukes at cdukes.com</a>, Syslog-ng users' and developers' mailing list
<a class="moz-txt-link-rfc2396E" href="mailto:syslog-ng at lists.balabit.hu">&lt;syslog-ng at lists.balabit.hu&gt;</a> <br>
Subject: Re: [syslog-ng] Tests using loggen - not receiving all the
packets
<blockquote
 cite="mid:k2pdf9074861004010633kfee2752cnc4ad1eefebe0c7f6 at mail.gmail.com"
 type="cite">What do you get if you send the loggen data to a simple
netcat session with its output redirected to a flat file?&nbsp; Do you see
all 55k messages using wc -l?<br>
  <br>
  <div class="gmail_quote">On Thu, Apr 1, 2010 at 6:51 AM, Clayton
Dukes <span dir="ltr">&lt;<a moz-do-not-send="true"
 href="mailto:cdukes at gmail.com">cdukes at gmail.com</a>&gt;</span> wrote:<br>
  <blockquote class="gmail_quote"
 style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I
should have mentioned that this is logging directly to a file.<br>
    <br>
destination df_logzilla {<br>
&nbsp;&nbsp; file("/var/log/logzilla/syslog.log"<br>
&nbsp;&nbsp;
template("$HOST\t$FACILITY\t$LEVEL\t$TAG\t$YEAR-$MONTH-$DAY\t$HOUR:$MIN:$SEC\t$PROGRAM\t$MSG\n")<br>
&nbsp;&nbsp; );<br>
};
    <div>
    <div class="h5"><br>
    <br>
    <br>
    <div class="gmail_quote">On Wed, Mar 31, 2010 at 11:47 PM, Clayton
Dukes <span dir="ltr">&lt;<a moz-do-not-send="true"
 href="mailto:cdukes at gmail.com" target="_blank">cdukes at gmail.com</a>&gt;</span>
wrote:<br>
    <blockquote class="gmail_quote"
 style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi Folks,<br>
I'm trying to run a test to check insert rates.<br>
If I run this command:<br>
      <br>
./loggen -r 5000 -D -I 10 127.0.0.1 514<br>
      <br>
The output shows:<br>
average rate = 5441.60 msg/sec, count=54420, time=10.007, msg size=256,
bandwidth=1360.40 kB/sec<br>
      <br>
But, my stats don't show that many messages received:<br>
      <br>
syslog-ng[6660]: Log statistics; dropped=\'pipe(/dev/xconsole)=0\',
processed=\'center(queued)=24232\', processed=\'center(received)=8077,
processed=\'destination(df_logzilla)=8077\'<br>
      <br>
As you can see, it sent 55k messages, but I only received 8k.<br>
Am I doing something wrong?<br>
      <br>
Here are my options in the syslog-ng config:<br>
options {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; long_hostnames(off);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; log_msg_size(8192);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; flush_lines(1);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; log_fifo_size(16384);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; time_reopen(10);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_dns(yes);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dns_cache(yes);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_fqdn(yes);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; keep_hostname(yes);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; chain_hostnames(no);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; perm(0644);<br>
&nbsp;&nbsp;&nbsp;&nbsp; stats_freq(60);<br>
      <br>
};<br>
      <font color="#888888"><br clear="all">
      <br>
-- <br>
______________________________________________________________ <br>
      <br>
Clayton Dukes<br>
______________________________________________________________<br>
      </font></blockquote>
    </div>
    <br>
    <br clear="all">
    <br>
    </div>
    </div>
    <font color="#888888">-- <br>
______________________________________________________________ <br>
    <br>
Clayton Dukes<br>
______________________________________________________________<br>
    </font><br>
______________________________________________________________________________<br>
Member info: <a moz-do-not-send="true"
 href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
 target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a moz-do-not-send="true"
 href="http://www.balabit.com/support/documentation/?product=syslog-ng"
 target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a moz-do-not-send="true"
 href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
    <br>
    <br>
  </blockquote>
  </div>
  <br>
  <pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>

  </pre>
</blockquote>
</body>
</html>

--------------040307020400030903060508--

More information about the syslog-ng mailing list