[syslog-ng] Ubuntu Precise -ng filling out buffer, dropping messages

[Evan Rempel]

On 04/29/2014 12:20 PM, Chaman Chakalaka wrote:
> I fixed the issue with udp being dropped at the system level by changing the linux core files but this time restarting the system, now I know they are missing somewhere between getting to the system and syslog-ng :(
>
> I'm lost once again...
>
> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
trysource s_network_udp { udp(so_rcvbuf(33554432) log_fetch_limit(20000) log_iw_size(1000000) ); };


This assumes that you have a large net.core.rmem_max

net.core.rmem_max = 52428800

See how that goes.