I was finally able to resolve the issue. The root cause was improper tcp/ip config on reciver host. Thanks all for the hints. On Jan 12, 2012 2:51 PM, <[email protected]> wrote:
> On Thu, 12 Jan 2012, Gaurav Kumar wrote: > > Hi all, >> I am wondering if anybody has performance testing numbers for rsyslog >> forwarding (using UDP) ? >> >> Currently, I am forwarding all of my rsyslog messages from one host to >> another host (also running rsyslog). Both hosts are running version 4.2.0. >> I am seeing throughput of about 2k-3k messages/second on receiver. If I >> try >> to send more messages from sender, I find that receiver's rsyslog is >> dropping logs. Both hosts share same virtual network with network latency >> of just about 1-2 ms. Both hosts have 2 virtual CPUs and 2 GB RAM. >> >> As per >> http://blog.gerhards.net/2008/**10/rsyslog-performance.html<http://blog.gerhards.net/2008/10/rsyslog-performance.html>it >> seems >> that rsyslog is capable of performing processing 100k messages/second. >> >> Can someone please clarify that this number (100k) is for local syslog >> messages only? (as opposed to receiving 100k messages/second over network) >> > > I have received >380K logs/sec (pretty close to gig-e wire speed) with no > packet loss. I routinely do tens of thousands of logs/sec between machines. > > My intent is to find out what is the expected number of messages that >> rsyslog can forward to other rsyslog host? (assuming average host spec- >> dual core, 2 GB RAM) >> > > it is going to depend a lot on what processing you are doing. > > disable name resolution (-x on the command line) > > when you have the systems dropping logs, what is the utilization of the > rsyslog threads? > > David Lang > ______________________________**_________________ > rsyslog mailing list > http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> > http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
