[syslog-ng] Multi-core use in threaded mode

Martin Holste mcholste at gmail.com
Tue Apr 17 21:12:49 CEST 2012


Yes, threaded(yes) is enabled as confirmed when using top -H to see
individual threads.  I have one inbound UDP source which gets a
thread, then one outbound UDP source and a program source.  Each looks
to get about 20-30% of a CPU, but the sum total of all three can never
go above 100%.  So, is it individual log {} stanzas that are tied to a
single CPU?

2012/4/17 Fekete Róbert <frobert at balabit.hu>:
> Hi,
>
> is threading enabled? It is off by default.
> Try:
> options {threaded(yes) ; };
>
> Also, scaling depends on the sources/destinations you use. For example, a tcp source can scale only if you have multiple clients that send messages to the same source.
>
> Regards,
>
> Robert
>
>
> On Tuesday, April 17, 2012 20:34 CEST, Martin Holste <mcholste at gmail.com> wrote:
>
>> I'm seeing that on a very busy syslog-ng 3.3.4 box, CPU never rises
>> above 103% and log loss occurs.  Does threaded mode not allow separate
>> threads to utilize multiple cores?  I need to scale above a single
>> CPU.
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>
>
>
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>


More information about the syslog-ng mailing list