[syslog-ng] any limitation with in-list filter

Scheidler, Balázs balazs.scheidler at balabit.com
Tue Nov 7 15:28:24 UTC 2017


I've just checked the code, there's no explicit limit. We are reading the
file until EOF, and insert the line into a GTree. So the only limitation
would be memory constraints, which would probably cause problems at runtime
too. (e.g. the inability to allocate a new, incoming message)

-- 
Bazsi

On Mon, Oct 30, 2017 at 7:58 AM, Fekete, Róbert <robert.fekete at balabit.com>
wrote:

> Hi Gopi,
>
> We are not aware of such limitations, but I'm cc-ing a developer to check
> it.
>
> @Laci, do you know about such a limit?
>
> On Mon, Oct 23, 2017 at 5:34 AM, Gopi Joshi <gkjoshi at gmail.com> wrote:
>
>> I am using in-list filter to match logs for specific users , these
>> specific users are saved in a plain text file . is there any restriction or
>> limitation on number of lines it can match in one file ?
>>
>> I currently have less than 10 users to compare with  but this list is
>> going to increase .
>>
>> Regards
>> Gopi Joshi
>>
>> ____________________________________________________________
>> __________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=
>> syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20171107/dac306b3/attachment.html>


More information about the syslog-ng mailing list