[syslog-ng] Flow-control

Anton Koldaev koldaevav at gmail.com
Tue Jan 8 13:38:21 CET 2013


For example at one moment of time I see the following values(with
flow-control disabled):
dst_syslog.total.stored:      10000 (msg)
dst_syslog.total.dropped:    12179 (msg per min)
dst_syslog.total.processed: 183800 (msg per min)

How should flow-control help me here?


On Tue, Jan 8, 2013 at 4:15 PM, Anton Koldaev <koldaevav at gmail.com> wrote:

> As I understand syslog-ng will buffer the lines in buffer until it can
> process them, right? Which buffer?
>
>
> On Tue, Jan 8, 2013 at 4:10 PM, Anton Koldaev <koldaevav at gmail.com> wrote:
>
>> Could you please explain the following statement:
>> > If the control window is full, syslog-ng stops reading messages from
>> the source until some messages are successfully sent to the destination.
>>
>> What does that mean - "stops reading messages from the source"? My
>> applications is still sending messages to this souce so where will all the
>> logs at that moment?
>> Where will it start reading the source? From the same point it stopped or
>> not?
>>
>> --
>> Best regards,
>> Koldaev Anton
>>
>
>
>
> --
> Best regards,
> Koldaev Anton
>



-- 
Best regards,
Koldaev Anton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20130108/a48a12ff/attachment.htm 


More information about the syslog-ng mailing list