No subject

for linux servers in tcim server )


Centralized log server forward all the logs to tcim server, In Tcim server
4000 devices are configured to collect logs from  centralized log server,
However in TCIM sever option for log_fifo_size ( 1000) defined and did not
mention any variable as max_conncection. Will this affect logs fails to
collect from centralized log to tcim server.


Below options defined in tcim server.

options {
        sync (0);
        time_reopen (10);
        log_fifo_size (1000);
        long_hostnames (off);
#       use_dns (no);
        use_dns (yes);
        use_fqdn (no);
        create_dirs (no);
        keep_hostname (yes);
};

source src {
        udp();
        tcp(port(514) keep-alive(yes));

};



1. If i increase the max-connection(4000 ). do we need to declare below
variable  like this...... (User requested  me to define the below value. in
tcim server.)

Since i am new to this,  Please advice.

if i declare the below variable, will server get hangs. this is very
critical server.

log_fifo_size=4000000
log_iw_size=1000
max-connection(4000)


Thanks in advance.

--000e0cd215eae343520491c39db0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Every one...<br><br>As i am new to this concept,Kindly help on this<br><=
br><br>All the syslog-ng client forward logs to centralized log server-- wo=
rks fine.<br><br>centralized log server forward logs to tcim server -- work=
s fine for solaris server and other network device--<br>
<br>From centralized log server to tcim server --=A0 issue ( not collecting=
 logs for linux servers in tcim server )<br><br><br>Centralized log server =
forward all the logs to tcim server, In Tcim server 4000 devices are config=
ured to collect logs from=A0 centralized log server, However in TCIM sever =
option for log_fifo_size ( 1000) defined and did not mention any variable a=
s max_conncection. Will this affect logs fails to collect from centralized =
log to tcim server.<br>
<br><br>Below options defined in tcim server.<br><br>options {<br>=A0=A0=A0=
=A0=A0=A0=A0 sync (0);<br>=A0=A0=A0=A0=A0=A0=A0 time_reopen (10);<br>=A0=A0=
=A0=A0=A0=A0=A0 log_fifo_size (1000);<br>=A0=A0=A0=A0=A0=A0=A0 long_hostnam=
es (off);<br>#=A0=A0=A0=A0=A0=A0 use_dns (no);<br>=A0=A0=A0=A0=A0=A0=A0 use=
_dns (yes);<br>
=A0=A0=A0=A0=A0=A0=A0 use_fqdn (no);<br>=A0=A0=A0=A0=A0=A0=A0 create_dirs (=
no);<br>=A0=A0=A0=A0=A0=A0=A0 keep_hostname (yes);<br>};<br><br>source src =
{<br>=A0=A0=A0=A0=A0=A0=A0 udp();<br>=A0=A0=A0=A0=A0=A0=A0 tcp(port(514) ke=
ep-alive(yes));<br><br>};<br><br><br><br>1. If i increase the max-connectio=
n(4000 ). do we need to declare below variable=A0 like this...... (User req=
uested=A0 me to define the below value. in tcim server.)<br>
<br>Since i am new to this,=A0 Please advice.<br><br>if i declare the below=
 variable, will server get hangs. this is very critical server.<br><br>log_=
fifo_size=3D4000000<br>log_iw_size=3D1000<br>max-connection(4000)<br><br><b=
r>
Thanks in advance.<br>

--000e0cd215eae343520491c39db0--