[syslog-ng] Tests using loggen - not receiving all the packets

Martin Holste mcholste at gmail.com
Thu Apr 1 15:33:12 CEST 2010


What do you get if you send the loggen data to a simple netcat session with
its output redirected to a flat file?  Do you see all 55k messages using wc
-l?

On Thu, Apr 1, 2010 at 6:51 AM, Clayton Dukes <cdukes at gmail.com> wrote:

> I should have mentioned that this is logging directly to a file.
>
> destination df_logzilla {
>    file("/var/log/logzilla/syslog.log"
>
> template("$HOST\t$FACILITY\t$LEVEL\t$TAG\t$YEAR-$MONTH-$DAY\t$HOUR:$MIN:$SEC\t$PROGRAM\t$MSG\n")
>    );
> };
>
>
>
> On Wed, Mar 31, 2010 at 11:47 PM, Clayton Dukes <cdukes at gmail.com> wrote:
>
>> Hi Folks,
>> I'm trying to run a test to check insert rates.
>> If I run this command:
>>
>> ./loggen -r 5000 -D -I 10 127.0.0.1 514
>>
>> The output shows:
>> average rate = 5441.60 msg/sec, count=54420, time=10.007, msg size=256,
>> bandwidth=1360.40 kB/sec
>>
>> But, my stats don't show that many messages received:
>>
>> syslog-ng[6660]: Log statistics; dropped=\'pipe(/dev/xconsole)=0\',
>> processed=\'center(queued)=24232\', processed=\'center(received)=8077,
>> processed=\'destination(df_logzilla)=8077\'
>>
>> As you can see, it sent 55k messages, but I only received 8k.
>> Am I doing something wrong?
>>
>> Here are my options in the syslog-ng config:
>> options {
>>       long_hostnames(off);
>>       log_msg_size(8192);
>>       flush_lines(1);
>>       log_fifo_size(16384);
>>       time_reopen(10);
>>       use_dns(yes);
>>       dns_cache(yes);
>>       use_fqdn(yes);
>>       keep_hostname(yes);
>>       chain_hostnames(no);
>>       perm(0644);
>>      stats_freq(60);
>>
>> };
>>
>>
>> --
>> ______________________________________________________________
>>
>> Clayton Dukes
>> ______________________________________________________________
>>
>
>
>
> --
> ______________________________________________________________
>
> Clayton Dukes
> ______________________________________________________________
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100401/b9a39662/attachment.htm 


More information about the syslog-ng mailing list