[syslog-ng] Profiling syslog-ng memory usage and performance

[William Sweat]

Hello,
I'm having issues with syslog-ng hitting swap on a set of servers that handle a lot of web traffic.  Are there good techniques to figure out an optimal configuration or if there's something with syslog-ng that may prove problematic with large amounts of requests?
I'm using the syslog-ng premium client (LTS v4.0.3b), on Linux systems with 256GB of Memory and RAID10.  I've enabled more informational logging, but because each system handles multiple gigabytes of traffic per day, debugging is problematic as this is a problem that manifests after a day (or three).  Also I am using nightly logrotate, so syslog-ng does get restarted everyday to write new log files.  These are only high traffic servers that are experiencing swap issues, the syslog-ng server doesn't have any problems.
Thanks,
Will Sweat
Demand Media


________________________________
Please NOTE: This electronic message, including any attachments, may include privileged, confidential and/or inside information owned by Demand Media, Inc. Any distribution or use of this communication by anyone other than the intended recipient(s) is strictly prohibited and may be unlawful. If you are not the intended recipient, please notify the sender by replying to this message and then delete it from your system. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20120221/e3336b04/attachment-0001.htm