[syslog-ng] Increase file descriptors for syslog-ng.

[Balazs Scheidler]

https://www.balabit.com/blog/installing-latest-syslog-ng-on-rhel-and-other-rpm-distributions/

On Mar 10, 2017 8:25 PM, "vijay amruth" <vijayamruth at gmail.com> wrote:

> Thank you very much. Where can I get 3.9.1 version? I tried to look it up,
> couldn't find it.
>
> Thank you.
> On Thu, Mar 9, 2017 at 9:24 PM Scheidler, Balázs <
> balazs.scheidler at balabit.com> wrote:
>
>>
>>
>> On Mar 10, 2017 2:59 AM, "vijay amruth" <vijayamruth at gmail.com> wrote:
>>
>> Hello everyone, Hope you are all doing great.
>>
>> I am running into some issues with syslog-ng file descriptors, I have
>> tried to set up ulimit -n value to 65535,
>>
>> *open files                      (-n) 65535*
>>
>> set the parameter to the follwoing in /etc/sysctl.conf, *fs.file-max =
>> 512000*
>>
>> and tried raising the value with syslog-ng --fd-limit <number>, I get the
>> following error
>>
>> ####syslog-ng --fd-limit 8192
>> WARNING: Configuration file format is too old, syslog-ng is running in
>> compatibility mode Please update it to use the syslog-ng 3.5 format at your
>> time of convinience, compatibility mode can operate less efficiently in
>> some cases. To upgrade the configuration, please review the warnings about
>> incompatible changes printed by syslog-ng, and once completed change the
>> @version header at the top of the configuration file.;
>> WARNING: global: the default value of log_fifo_size() has changed to
>> 10000 in syslog-ng 3.3 to reflect log_iw_size() changes for tcp()/udp()
>> window size changes;
>> Using a global log-fetch-limit() option was removed, please use a
>> per-source log-fetch-limit();
>> WARNING: window sizing for tcp sources were changed in syslog-ng 3.3, the
>> configuration value was divided by the value of max-connections(). The
>> result was too small, clamping to 100 entries. Ensure you have a proper
>> log_fifo_size setting to avoid message loss.; orig_log_iw_size='0',
>> new_log_iw_size='100', min_log_fifo_size='1300000'
>>
>>
>>
>> These errors are not related to the FD limit setting, rather it tries you
>> that your config version is older than your syslog-ng version, and as
>> number of changes were made since the version you were previously using.
>>
>> You should either remove the offending options, or adjust their value.
>>
>> log-fifo-size needs to be at least 10000
>> log-iw-site should probably be removed
>> log-fetch-limit should probably be removed as well.
>>
>> Once you are done with these changes, increase @version at the top of the
>> file, then the warnings should be gone.
>>
>> The FD limit is probably set properly, the warnings had nothing to do
>> with that. You just need to make sure to add this parameter to the startup
>> options.
>>
>>
>>
>>
>> and I am unable to  stop the syslog-ng service using systemctl, it
>> immediately re-starts, I am using centOS 7.2, I have noticed few other
>> people on the internet had the same problem, please advice, any help is
>> appreciated.
>>
>> *OS: CentOS 7.2*
>> *Hardware : VM*
>> *Problems : 1) Unable to increase the file descriptors for syslog-ng. 2)
>> Unable to stop the service using systemctl stop command, it automatically
>> restarts right after with a new pid.*
>>
>>
>>
>> You seem to be using 3.5.x please upgrade to 3.9.1. We did a number of
>> improvements wrt systemd in recent versions.
>>
>>
>> ____________________________________________________________
>> __________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?
>> product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>> --
> Thanks,
> Vijay Amrut.
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20170311/c09886e8/attachment.html>