No subject

logs for linux servers in tcim server )<br>
  <br>
  <br>
Centralized log server forward all the logs to tcim server, In Tcim
server 4000 devices are configured to collect logs from&nbsp; centralized
log server, However in TCIM sever option for log_fifo_size ( 1000)
defined and did not mention any variable as max_conncection. Will this
affect logs fails to collect from centralized log to tcim server.<br>
  <br>
  <br>
Below options defined in tcim server.<br>
  <br>
options {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; sync (0);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; time_reopen (10);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; log_fifo_size (1000);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; long_hostnames (off);<br>
#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_dns (no);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_dns (yes);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_fqdn (no);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; create_dirs (no);<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; keep_hostname (yes);<br>
};<br>
  <br>
source src {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; udp();<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; tcp(port(514) keep-alive(yes));<br>
  <br>
};<br>
  <br>
  <br>
  <br>
1. If i increase the max-connection(4000 ). do we need to declare below
variable&nbsp; like this...... (User requested&nbsp; me to define the below
value. in tcim server.)<br>
  <br>
Since i am new to this,&nbsp; Please advice.<br>
  <br>
if i declare the below variable, will server get hangs. this is very
critical server.<br>
  <br>
log_fifo_size=4000000<br>
log_iw_size=1000<br>
max-connection(4000)<br>
  <br>
  <br>
Thanks in advance.<br>
  <pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>

  </pre>
</blockquote>
</body>
</html>

--------------080805020504070103050107--