[syslog-ng] Losing to much remote sent logs

Martin Holste mcholste at gmail.com
Tue Mar 6 15:43:36 CET 2012


> For a benchmark, I have stressed (10 000 to 20 000msg/sec) a syslogd server
> which transmits all logs it received to a Syslog-NG server over udp. I was able
> to reach a score of 90% of lost messages.
>
> udp is very good way to have problem with your log management solution I think.

That doesn't sound right at all.  We get much better performance with
UDP: zero drops at around 15k/sec with a lot of bursting to over 20k.


More information about the syslog-ng mailing list