[syslog-ng] Syslog-ng + Consuming syslog alerts via FIFO: Alarms being lost, no logs related anywhere

[Fabien Wernli]

Hi,

On Thu, Apr 08, 2021 at 12:25:44PM -0300, Richter Vitali Guedes wrote:
> How can I fix it? I need to be sure that all data received is forwarded to
> their destinations, respecting the filters, and without any information
> loss.

You should really consider using TCP.
We switched our 2000 nodes+ a month ago, and it saves us a lot of
headeaches. It also makes it much easier to monitor, as TCP connections are
all easily traceable and can be plotted to assess the load-balancer's
situation for instance.

If you really want to keep UDP, the advice I could give would be to use
reusable sockets, which has been implemented quite recently.