[syslog-ng] syslog-ng 3.22.1 consuming a lot of RAM on amqp or kafka destinations

joao reis joao at 7lan.net
Sat Aug 24 12:18:31 UTC 2019


Hi,

I'm having high RAM consuming problems using both amqp or kafka 
destinations. I'm using patterndb (without any context definition) some 
basic filters.

Changing the destination to "file" or "program" type, the high RAM 
problem doesn't happen.

I tested these backends only in this version of syslog-ng and I don't 
know if it is a version specific problem.

The backends are up and running and receiving correctly from syslog-ng.

Here are my configurations:

destination d_amqp {
     amqp(
         vhost("/email_log")
         host("127.0.0.1")
         port(5672)
         exchange("maillog")
         username("maillog")
         password("maillog")
         disk-buffer(
             mem-buf-size(10000)
             disk-buf-size(2000000)
             reliable(yes)
             dir("/tmp/disk-buffer")
         )
         exchange-type("fanout")
         routing-key("")
         persistent(yes)
         value-pairs(
             scope("nv-pairs")
         )
     );
};


destination d_kafka {
   kafka(
     bootstrap-servers("127.0.0.1:9092")
     topic("MYTOPIC")
   );
};


I added the disk-buffer option to see if it gets any better, but without 
any good result;

Here the syslog-ng-ctl output, when configured to amqp:

[root at logserver3 conf.d]# syslog-ng-ctl stats
SourceName;SourceId;SourceInstance;State;Type;Number
global;payload_reallocs;;a;processed;3635299
src.journald;s_sys#0;journal;a;processed;542
src.journald;s_sys#0;journal;a;stamp;1566648214
global;sdata_updates;;a;processed;0
global;scratch_buffers_bytes;;a;queued;512
source;s_host;;a;processed;5440633
destination;d_boot;;a;processed;0
destination;d_kern;;a;processed;9
source;s_sys;;a;processed;612
dst.amqp;d_amqp#0;amqp,/email_log,127.0.0.1,5672,maillog,fanout;a;dropped;0
dst.amqp;d_amqp#0;amqp,/email_log,127.0.0.1,5672,maillog,fanout;a;processed;2691676
dst.amqp;d_amqp#0;amqp,/email_log,127.0.0.1,5672,maillog,fanout;a;queued;0
dst.amqp;d_amqp#0;amqp,/email_log,127.0.0.1,5672,maillog,fanout;a;written;2691676
src.internal;s_sys#1;;a;processed;70
src.internal;s_sys#1;;a;stamp;1566648339
global;msg_clones;;a;processed;2691634
global;internal_queue_length;;a;processed;0
destination;d_spol;;a;processed;0
destination;d_mlal;;a;processed;0
center;;received;a;processed;5441245
destination;d_mesg;;a;processed;531
destination;d_mail;;a;processed;0
destination;d_auth;;a;processed;29
destination;d_cron;;a;processed;52
destination;d_amqp;;a;processed;2691676
global;scratch_buffers_count;;a;queued;5970004541496
center;;queued;a;processed;2692297

Thanks in advance.





More information about the syslog-ng mailing list