[syslog-ng] On FreeBSd: syslog-ng: I/O error occurred while writing; fd='xx', error='No buffer space available (yy)'

[Gergely Nagy]

Hi!

Traiano Welcome <Traiano.Welcome at mtnbusiness.co.za> writes:

> I've been seeing the following in the messages log of my freebsd syslog
> server for quite some time now:
>
> ---
> Mar 20 12:19:12 syslog2 syslog-ng[35313]: I/O error occurred while
> writing; fd='12', error='No buffer space available (55)'
> Mar 20 12:19:12 syslog2 syslog-ng[35313]: Connection broken;
> time_reopen='60'
> Mar 20 12:19:12 syslog2 syslog-ng[35313]: I/O error occurred while
> writing; fd='13', error='No buffer space available (55)'
> Mar 20 12:19:12 syslog2 syslog-ng[35313]: Connection broken;
> time_reopen='60'
> ---
>
> These happen at a frequency of about 7 per minute on average. See attached
> trend graphs for an idea of the volume of traffic we're doing, as well as
> the memory and cpu utilisation trends on this server during this
> period.

It would be useful to know what fd 12 and 13 are, that might give us a
hint or two. Though, I suppose, they're an UDP destination.

> My question is: What does this error mean, and how can I resolve it?

With syslog-ng 2.0, I have no idea, I'm afraid.

I would strongly suggest upgrading to 3.2 or 3.3. With those two, you
can increase various queue and buffer sizes within the config that can
perhaps help. The same settings migth be available in 2.0 too, but I
haven't looked at that in ages.

-- 
|8]