singh.janmejay wrote > how many threads is imptcp configured for? On the reciever imptcp threads is set to 7, so 8 total (equal to the number of cores on the server).
singh.janmejay wrote > how does cpu-util (%sys and %usr) change on receiver as it goes from > healthy 30-40k ingestion to backlog building up? During normal operations user time is roughly 30% and system time is roughly 15%. During the incident user time had highs of 80-82% and lows of 10-15%. System time had highs of 70-80% and lows of 10-15%. In an hour period during the issue avg system time was 55% and avg user time was 18%. Under normal conditions the avg system time for an hour period was 6% and user time was 21% (not percentages are much small in the early morning when the input halfed - the numbers are representative of the time the incident occurred and under normal 30-40k conditions) singh.janmejay wrote > what does the receiving throughput drop to (assuming it is 40k when all is > well)? the throughput will bounce between highs of 20k-100k and lows of a 30-15k singh.janmejay wrote > what is omfwd queue.workerthreads (assuming minimum messages is not very > high, so all of them will be used as backlog builds up)? Our omfwd action on the sender side has a dedicated queue. The queue has been set to max of 8 worker threads and a min msg size of 10000. The action its self has nothing set on it. I do not currently track the number of used threads in our monitor tools ... its on my to-do-list. singh.janmejay wrote > have you set processOnPoller off on receiver side? Yes, quite some time ago. ----- ~Regards Matthew Gaetano -- View this message in context: http://rsyslog-users.1305293.n2.nabble.com/Disabling-IMPTCP-FlowControl-tp7591485p7591498.html Sent from the rsyslog-users mailing list archive at Nabble.com. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

