[syslog-ng] Better performance between udp, unix-stream or pipe ?

[Martin Holste]

Why do you need separate syslog-ng processes running?

On Tue, Nov 16, 2010 at 10:49 AM, Yann I. <yann.frm at gmail.com> wrote:
> Hi !
>
> I have a question about the use of udp, unix-stream or pipe. I would like to
> forward a syslog message to the same syslog server like this :
>
> |  log {
> |     source (s_r_udp);    (<-- listen on UDP/514)
> |
> |     filter (....);
> |     filter (....);
> |     parser (...);
> |
> |     destination (d_local_syslog);  (<-- send the message to a local syslog
> by using unix-stream, udp or pipe mecanism)
> |  };
>
> (...)
>
> |  log {
> |     source (s_local_syslog);    (<--- here I receive the messages sent by
> the "d_syslog_loop")
> |
> |     filter (...);
> |     filter (...);
> |     parser (...);
> |
> |     destination (d_remote_syslog);
>
> I'm looking for the better way to send syslog message to the same syslog
> server : which mecanism provides the better performances : pipe, udp (by
> using network) or unix-stream ?
> Maybe the "pipe" is the better solution ?...
>
> I'm using the syslog-ng OSE 3.1.2 on CentOS.
>
> Regards,
>
> Yann I.
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
>