I will try to install 5.8.6, btw, disabling dns resolution didn't help. On Thu, Jan 12, 2012 at 4:55 AM, Rainer Gerhards <[email protected]>wrote:
> Have your turned off name resolution for a test? Why not use 5.8.6? > > rainer > > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Gaurav Kumar > > Sent: Thursday, January 12, 2012 10:33 AM > > To: rsyslog-users > > Subject: Re: [rsyslog] udp forwarding performance > > > > Hi Rainer, > > I am now running version 5.8.1. I was running into rate-limiting issues > > so > > I've set following- > > $IMUXSockRateLimitInterval 0 > > $SystemLogRateLimitInterval 0 > > > > After this, the sender host is sending only about 300-400 messages, > > then > > dropping a lot of them (literally thousands). I ran Wireshark to > > confirm > > whether if it is receiver's issue or sender's and found that indeed > > sender > > is not sending messages. > > > > Can you please suggest which directives I should set in config to > > troubleshoot this? > > > > Thanks, > > Gaurav > > > > > > > > On Thu, Jan 12, 2012 at 3:52 AM, Rainer Gerhards > > <[email protected]>wrote: > > > > > > -----Original Message----- > > > > From: [email protected] [mailto:rsyslog- > > > > [email protected]] On Behalf Of Gaurav Kumar > > > > Sent: Thursday, January 12, 2012 9:49 AM > > > > To: rsyslog-users > > > > Subject: Re: [rsyslog] udp forwarding performance > > > > > > > > Thanks Rainer! > > > > I am using Ubuntu 10.04 LTS and 4.2.0 is the version which gets > > install > > > > by > > > > apt-get. I will try to install newer version. > > > > > > > > BTW, what should be the expected performance (messages/sec) for > > sending > > > > and > > > > receiving messages over UDP? > > > > > > Wiht v6 > 500k/second, but you possibly need to enable realtime > > priority in > > > order for the OS to know that rsyslog must be sufficiently often > > activated. > > > This number assumes lightweight processing (no database inserts or > > such). > > > > > > Try first without realtime. > > > > > > Rainer > > > > > > > > Thanks again, > > > > Gaurav > > > > > > > > On Thu, Jan 12, 2012 at 3:45 AM, Rainer Gerhards > > > > <[email protected]>wrote: > > > > > > > > > I guess your problem is rooted in name resolution. A full blown > > DNS > > > > cache > > > > > has > > > > > only recently been introduced in v6. Previous version had limited > > > > caching, > > > > > which usually works well, but not in all cases. Also 4.2.0 is > > *way > > > > > outdated*, > > > > > so probably the issue (if it is one rooted in code) may be solved > > by > > > > > running > > > > > the current 4.8.6 version. > > > > > > > > > > HTH > > > > > Rainer > > > > > > > > > > > -----Original Message----- > > > > > > From: [email protected] [mailto:rsyslog- > > > > > > [email protected]] On Behalf Of Gaurav Kumar > > > > > > Sent: Thursday, January 12, 2012 9:40 AM > > > > > > To: [email protected] > > > > > > Subject: [rsyslog] udp forwarding performance > > > > > > > > > > > > Hi all, > > > > > > I am wondering if anybody has performance testing numbers for > > > > rsyslog > > > > > > forwarding (using UDP) ? > > > > > > > > > > > > Currently, I am forwarding all of my rsyslog messages from one > > host > > > > to > > > > > > another host (also running rsyslog). Both hosts are running > > version > > > > > > 4.2.0. > > > > > > I am seeing throughput of about 2k-3k messages/second on > > receiver. > > > > If I > > > > > > try > > > > > > to send more messages from sender, I find that receiver's > > rsyslog > > > > is > > > > > > dropping logs. Both hosts share same virtual network with > > network > > > > > > latency > > > > > > of just about 1-2 ms. Both hosts have 2 virtual CPUs and 2 GB > > RAM. > > > > > > > > > > > > As per http://blog.gerhards.net/2008/10/rsyslog- > > performance.html it > > > > > > seems > > > > > > that rsyslog is capable of performing processing 100k > > > > messages/second. > > > > > > > > > > > > Can someone please clarify that this number (100k) is for local > > > > syslog > > > > > > messages only? (as opposed to receiving 100k messages/second > > over > > > > > > network) > > > > > > > > > > > > My intent is to find out what is the expected number of > > messages > > > > that > > > > > > rsyslog can forward to other rsyslog host? (assuming average > > host > > > > spec- > > > > > > dual core, 2 GB RAM) > > > > > > > > > > > > Cheers, > > > > > > Gaurav > > > > > > _______________________________________________ > > > > > > rsyslog mailing list > > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > > http://www.rsyslog.com/professional-services/ > > > > > _______________________________________________ > > > > > rsyslog mailing list > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > http://www.rsyslog.com/professional-services/ > > > > > > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > -- _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
