[syslog-ng] Packet loss.

[Jim Hendrick]

Have you been able to isolate what is dropping the packets? If it is the
kernel / driver (netstat -su) then tuning the app probably won't help much.

You might look at "pinning" the resources if you can do that in your
virtual environment.

If you have load balancers available, you might be better off to simply
point the UDP syslogs at a virtual IP and have the load balancer distribute
across a pool of syslog servers.

Good luck,
Jim


On Wed, Sep 12, 2018 at 1:27 PM vijay amruth <vijayamruth at gmail.com> wrote:

> Thank you, Fabien.
> I have tuned parameters at OS level, these being VMs didn't help much, can
> this be set at app level? if so, how?
>
> On Wed, Sep 12, 2018 at 7:09 AM Fabien Wernli <wernli at in2p3.fr> wrote:
>
>> Hi Vijay,
>>
>> We're running 3.9.1 too with UDP.
>> Have you tried increasing so-rcvbuf?
>>
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>
> --
> Thanks,
> Vijay Amrut.
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180912/5d154331/attachment.html>