No subject
Tue Sep 8 20:42:31 CEST 2009
syslog-ng 29232 root 3r FIFO 0,6
214383200 pipe<br>
syslog-ng 29232 root 5u unix 0xffff81022f7bf680
214383203 /var/lib/syslog-ng/syslog-ng.ctl<br>
syslog-ng 29232 root 7u IPv4 214383201
TCP 127.0.0.1:516 (LISTEN)<br>
syslog-ng 29232 root 9u IPv4 214383285
TCP 127.0.0.1->127.0.0.1:28061 (ESTABLISHED)<br>
<br>
<br>
</font></font><br>
Sent: Thursday, April 01, 2010 7:33:12 AM<br>
From: Martin Holste <a moz-do-not-send="true"
class="moz-txt-link-rfc2396E" href="mailto:mcholste at gmail.com"><mcholste at gmail.com></a><br>
To: <a moz-do-not-send="true" class="moz-txt-link-abbreviated"
href="mailto:cdukes at cdukes.com">cdukes at cdukes.com</a>, Syslog-ng
users' and developers' mailing list
<a moz-do-not-send="true" class="moz-txt-link-rfc2396E"
href="mailto:syslog-ng at lists.balabit.hu"><syslog-ng at lists.balabit.hu></a>
<br>
Subject: Re: [syslog-ng] Tests using loggen - not receiving all the
packets
<blockquote
cite="mid:k2pdf9074861004010633kfee2752cnc4ad1eefebe0c7f6 at mail.gmail.com"
type="cite">What do you get if you send the loggen data to a simple
netcat session with its output redirected to a flat file? Do you see
all 55k messages using wc -l?<br>
<br>
<div class="gmail_quote">On Thu, Apr 1, 2010 at 6:51 AM, Clayton
Dukes <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:cdukes at gmail.com">cdukes at gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I
should have mentioned that this is logging directly to a file.<br>
<br>
destination df_logzilla {<br>
file("/var/log/logzilla/syslog.log"<br>
template("$HOST\t$FACILITY\t$LEVEL\t$TAG\t$YEAR-$MONTH-$DAY\t$HOUR:$MIN:$SEC\t$PROGRAM\t$MSG\n")<br>
);<br>
};
<div>
<div class="h5"><br>
<br>
<br>
<div class="gmail_quote">On Wed, Mar 31, 2010 at 11:47 PM,
Clayton
Dukes <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:cdukes at gmail.com" target="_blank">cdukes at gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi
Folks,<br>
I'm trying to run a test to check insert rates.<br>
If I run this command:<br>
<br>
./loggen -r 5000 -D -I 10 127.0.0.1 514<br>
<br>
The output shows:<br>
average rate = 5441.60 msg/sec, count=54420, time=10.007, msg size=256,
bandwidth=1360.40 kB/sec<br>
<br>
But, my stats don't show that many messages received:<br>
<br>
syslog-ng[6660]: Log statistics; dropped=\'pipe(/dev/xconsole)=0\',
processed=\'center(queued)=24232\', processed=\'center(received)=8077,
processed=\'destination(df_logzilla)=8077\'<br>
<br>
As you can see, it sent 55k messages, but I only received 8k.<br>
Am I doing something wrong?<br>
<br>
Here are my options in the syslog-ng config:<br>
options {<br>
long_hostnames(off);<br>
log_msg_size(8192);<br>
flush_lines(1);<br>
log_fifo_size(16384);<br>
time_reopen(10);<br>
use_dns(yes);<br>
dns_cache(yes);<br>
use_fqdn(yes);<br>
keep_hostname(yes);<br>
chain_hostnames(no);<br>
perm(0644);<br>
stats_freq(60);<br>
<br>
};<br>
<font color="#888888"><br clear="all">
<br>
-- <br>
______________________________________________________________ <br>
<br>
Clayton Dukes<br>
______________________________________________________________<br>
</font></blockquote>
</div>
<br>
<br clear="all">
<br>
</div>
</div>
<font color="#888888">-- <br>
______________________________________________________________ <br>
<br>
Clayton Dukes<br>
______________________________________________________________<br>
</font><br>
______________________________________________________________________________<br>
Member info: <a moz-do-not-send="true"
href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a moz-do-not-send="true"
href="http://www.balabit.com/support/documentation/?product=syslog-ng"
target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a moz-do-not-send="true"
href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
<br>
</blockquote>
</div>
<br>
<pre wrap=""><hr size="4" width="90%">
______________________________________________________________________________
Member info: <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
<pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
</body>
</html>
--------------020207040202080803030400--
More information about the syslog-ng
mailing list