Hi Rainer, I am now running version 5.8.1. I was running into rate-limiting issues so I've set following- $IMUXSockRateLimitInterval 0 $SystemLogRateLimitInterval 0
After this, the sender host is sending only about 300-400 messages, then dropping a lot of them (literally thousands). I ran Wireshark to confirm whether if it is receiver's issue or sender's and found that indeed sender is not sending messages. Can you please suggest which directives I should set in config to troubleshoot this? Thanks, Gaurav On Thu, Jan 12, 2012 at 3:52 AM, Rainer Gerhards <[email protected]>wrote: > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Gaurav Kumar > > Sent: Thursday, January 12, 2012 9:49 AM > > To: rsyslog-users > > Subject: Re: [rsyslog] udp forwarding performance > > > > Thanks Rainer! > > I am using Ubuntu 10.04 LTS and 4.2.0 is the version which gets install > > by > > apt-get. I will try to install newer version. > > > > BTW, what should be the expected performance (messages/sec) for sending > > and > > receiving messages over UDP? > > Wiht v6 > 500k/second, but you possibly need to enable realtime priority in > order for the OS to know that rsyslog must be sufficiently often activated. > This number assumes lightweight processing (no database inserts or such). > > Try first without realtime. > > Rainer > > > > Thanks again, > > Gaurav > > > > On Thu, Jan 12, 2012 at 3:45 AM, Rainer Gerhards > > <[email protected]>wrote: > > > > > I guess your problem is rooted in name resolution. A full blown DNS > > cache > > > has > > > only recently been introduced in v6. Previous version had limited > > caching, > > > which usually works well, but not in all cases. Also 4.2.0 is *way > > > outdated*, > > > so probably the issue (if it is one rooted in code) may be solved by > > > running > > > the current 4.8.6 version. > > > > > > HTH > > > Rainer > > > > > > > -----Original Message----- > > > > From: [email protected] [mailto:rsyslog- > > > > [email protected]] On Behalf Of Gaurav Kumar > > > > Sent: Thursday, January 12, 2012 9:40 AM > > > > To: [email protected] > > > > Subject: [rsyslog] udp forwarding performance > > > > > > > > Hi all, > > > > I am wondering if anybody has performance testing numbers for > > rsyslog > > > > forwarding (using UDP) ? > > > > > > > > Currently, I am forwarding all of my rsyslog messages from one host > > to > > > > another host (also running rsyslog). Both hosts are running version > > > > 4.2.0. > > > > I am seeing throughput of about 2k-3k messages/second on receiver. > > If I > > > > try > > > > to send more messages from sender, I find that receiver's rsyslog > > is > > > > dropping logs. Both hosts share same virtual network with network > > > > latency > > > > of just about 1-2 ms. Both hosts have 2 virtual CPUs and 2 GB RAM. > > > > > > > > As per http://blog.gerhards.net/2008/10/rsyslog-performance.html it > > > > seems > > > > that rsyslog is capable of performing processing 100k > > messages/second. > > > > > > > > Can someone please clarify that this number (100k) is for local > > syslog > > > > messages only? (as opposed to receiving 100k messages/second over > > > > network) > > > > > > > > My intent is to find out what is the expected number of messages > > that > > > > rsyslog can forward to other rsyslog host? (assuming average host > > spec- > > > > dual core, 2 GB RAM) > > > > > > > > Cheers, > > > > Gaurav > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
