[syslog-ng] Queue size in syslog-ng?

Gergely Nagy algernon at balabit.hu
Thu Nov 22 16:25:56 CET 2012


shadyabhi <abhijeet.1989 at gmail.com> writes:

> How many messages per second can syslog-ng handle? Does anyone have any 
> number. Lets suppose, I have a 16GB RAM, 8 core 2.5Ghz box.

That depends on a lot of things. If you have a single source, a single
destination and no filtering or rewriting, that'll be reasonably fast,
but will use only one core. However, since this simple forwarding is not
CPU intensive, your bottleneck won't be the CPU. (most likely the end
point will be, especially if its a disk)

If you do filtering or rewriting, that can slow things down
considerably. Using multiple sources or destinations also affects
performance in various ways.

Therefore, unfortunately, there is no definitive answer to your
question, as it depends on a whole lot of variables.

-- 
|8]



More information about the syslog-ng mailing list