[syslog-ng] Question about PE edition disk-based buffering

Balint Kovacs balint.kovacs at balabit.com
Tue Oct 4 14:35:08 CEST 2011


Hi Clayton,

the failover time is steered by the time_reopen() global option (60 sec 
by default), so setting it to a much lower value should do the trick.

 From the admin guide:
"To list several failover servers, separate the address of the servers 
with comma. The time syslog-ng PE waits for the a server before 
switching to the next failover server is set in the /|time_reopen()|/ 
option. For details about how client-side failover works, see Section 
2.15, Client-side failover 
<http://www.balabit.com/sites/default/files/documents/syslog-ng-pe-v4.0-guide-admin-en.html/index.html-single.html#concepts_failover>."

http://www.balabit.com/sites/default/files/documents/syslog-ng-pe-v4.0-guide-admin-en.html/index.html-single.html#example-failover-server-tcp

I assume that the TCP connection breakdown is detected by syslog-ng in a 
timely manner, pls correct me if I misunderstood the problem.

Balint

On 10/04/2011 12:18 PM, Clayton Dukes wrote:
> Hi Folks,
> We have a team doing testing on the PE edition and they are finding 
> that the timeout for the failover trigger takes 60 seconds:
>
> It was observed that it takes anytime between 10 to 60 seconds to 
> detect connection is broken. We found out it by running syslog-ng in 
> debug mode. I guess it relies on connection timeout. This 60 second is 
> large interval compared to the default interval that we have (15 sec).
>
>
> My question: Is there a way to tune this parameter down to 15 seconds 
> in the config?
>
> ______________________________________________________________
>
> Clayton Dukes
> ______________________________________________________________
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20111004/9cc39ea6/attachment.htm 


More information about the syslog-ng mailing list