On Thu, 12 Jan 2012, Gaurav Kumar wrote:
Hi all,
I am wondering if anybody has performance testing numbers for rsyslog
forwarding (using UDP) ?
Currently, I am forwarding all of my rsyslog messages from one host to
another host (also running rsyslog). Both hosts are running version 4.2.0.
I am seeing throughput of about 2k-3k messages/second on receiver. If I try
to send more messages from sender, I find that receiver's rsyslog is
dropping logs. Both hosts share same virtual network with network latency
of just about 1-2 ms. Both hosts have 2 virtual CPUs and 2 GB RAM.
As per http://blog.gerhards.net/2008/10/rsyslog-performance.html it seems
that rsyslog is capable of performing processing 100k messages/second.
Can someone please clarify that this number (100k) is for local syslog
messages only? (as opposed to receiving 100k messages/second over network)
I have received >380K logs/sec (pretty close to gig-e wire speed) with no
packet loss. I routinely do tens of thousands of logs/sec between
machines.
My intent is to find out what is the expected number of messages that
rsyslog can forward to other rsyslog host? (assuming average host spec-
dual core, 2 GB RAM)
it is going to depend a lot on what processing you are doing.
disable name resolution (-x on the command line)
when you have the systems dropping logs, what is the utilization of
the rsyslog threads?
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
