[syslog-ng] Elasticsearch destination

Fabien Wernli wernli at in2p3.fr
Fri Oct 31 09:32:05 CET 2014


On Fri, Oct 31, 2014 at 04:55:09AM +0100, Balazs Scheidler wrote:
> I've just checked, the syslog-ng perl module does a value-pairs evaluation
> and sends the results to the perl function as a hash. This is not the
> speediest thing (it'd be better to export the underlying C structure as an
> object to Perl, but should still cope with much more than 2k/sec).

We just checked with algernon, and my perl destination can handle a lot more
workload (15k/s) with a dummy queue function, so this really points to
Search::Elasticsearch backpressure.


More information about the syslog-ng mailing list