[syslog-ng] Queue size in syslog-ng?

[Daniel Neubacher]

Nice useless comment... With 30k logs per second it is in fact a small queue but enough for a restart of the logstash services.

Von: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] Im Auftrag von Anton Koldaev
Gesendet: Donnerstag, 22. November 2012 15:31
An: Syslog-ng users' and developers' mailing list
Betreff: Re: [syslog-ng] Queue size in syslog-ng?

Random tuning. Just make it bigger!

On Thu, Nov 22, 2012 at 1:55 PM, Daniel Neubacher <daniel.neubacher at xing.com<mailto:daniel.neubacher at xing.com>> wrote:
You need to configure log_fifo_size. I've set "log_fifo_size(1000000)" to get sure nothing get lost. Make sure you have some memory left free on the server :)

Daniel

-----Ursprüngliche Nachricht-----
Von: syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu> [mailto:syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>] Im Auftrag von Abhijeet R
Gesendet: Montag, 19. November 2012 11:43
An: syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>
Betreff: [syslog-ng] Queue size in syslog-ng?

Hi all,

In my setup, I send logs from all the servers to a central syslog server. This syslog-ng server also has a destination on a different port which is picked up by logstash's input block. (consider it just a consumer to those messages).

What if this consumer goes down? How big is the queue? Is that configurable? How do I make sure that none of the messages are missed for the time the consumer is down?

--
Cheers,
Abhijeet R
http://blog.abhijeetr.com

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq



--
Best regards,
Koldaev Anton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20121123/4e374c3d/attachment-0001.htm