[syslog-ng] Not all messages getting to program destination

[Matthew Hall]

On Wed, Apr 13, 2011 at 03:28:18PM -0500, Martin Holste wrote:
> Hm, you really shouldn't be dropping with a simple script.  How many
> msgs/second?

Try recording a few hundred MB and replaying through the script.

Print a time stamp for every 10K processed and look for spike / dip with a spreadsheet. Try a profiler, etc.

Maybe something in the script is not stable under load.

Or maybe syslog-ng is getting too many UDPs with too small of a socket buffer and losing them.

Matthew.