[syslog-ng] TCP orig_log_iw_size='3', why?

[claudio at witel.it]

Hello syslog-ng community,

 I get this warning at syslog-ng start (or restart) when running
journalctl

 [...]
 Feb 27 02:46:57 xxxsplunksyslog1 syslog-ng[2998304]:
[2025-02-27T02:46:57.330923] WARNING: window sizing for tcp sources were
changed in syslog-ng 3.3, the configuration value was divided by the
value of max-connections(). The result was too small, clamping to value
of min_iw_size_per_reader. Ensure you have a proper log_fifo_size
setting to avoid message loss.; orig_log_iw_size='3',
new_log_iw_size='100', min_iw_size_per_reader='100',
min_log_fifo_size='30000'
 Feb 27 02:46:57 xxxsplunksyslog1 systemd[1]: Started System Logger
Daemon.

 I thought the orig_log_iw_size value was coming from the formula
log_iw_size/max_connections which should be 100/300=1/3
 What is this orig_log_iw_size='3' ?

 Thanks. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20250301/9ce2e8e4/attachment.htm>