My understanding (now) is that you need to set --fd-limit *and* up the ulimit. Simply updating ulimit is not sufficient for syslog-ng to be able to handle more than the default 4k open files. Is this correct?