[logs] Optimized central syslog server

From: Rainer Gerhards (rgerhards@private)
Date: Fri Jan 09 2004 - 03:00:29 PST

  • Next message: Andrew Sturman: "[logs] IIS5 logging bypass"

    Hi list,
    
    based on customer questions I put together a brief article on what to
    look at when optimizing a central syslog server. It is targeted towards
    our products for obvious reasons, but I think it is generically enough
    to be helpful in general. It is not about tweaking specific product
    parameters but more general considerations like machine sizing and such.
    So I thought I post it here:
    
    http://www.monitorware.com/Common/en/Articles/performance-optimizing-sys
    log-server.asp
    
    I know that the part about multithreading and multiple CPUs does NOT
    apply to stock linux syslogd, because it is of single-threaded,
    single-process nature. If I am not wrong, it applies to other *nix
    syslogds, at least SDSC syslog.
    
    Of course, comments are always appreciated ;)
    
    Rainer
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysis@private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Fri Jan 09 2004 - 12:18:25 PST