[syslog-ng] Queue size in syslog-ng?

[Daniel Neubacher]

You need to configure log_fifo_size. I've set "log_fifo_size(1000000)" to get sure nothing get lost. Make sure you have some memory left free on the server :)

Daniel

-----Ursprüngliche Nachricht-----
Von: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] Im Auftrag von Abhijeet R
Gesendet: Montag, 19. November 2012 11:43
An: syslog-ng at lists.balabit.hu
Betreff: [syslog-ng] Queue size in syslog-ng?

Hi all,

In my setup, I send logs from all the servers to a central syslog server. This syslog-ng server also has a destination on a different port which is picked up by logstash's input block. (consider it just a consumer to those messages).

What if this consumer goes down? How big is the queue? Is that configurable? How do I make sure that none of the messages are missed for the time the consumer is down?

--
Cheers,
Abhijeet R
http://blog.abhijeetr.com

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq