In message <[email protected]>,
[email protected] writes:
>On Thu, 22 Oct 2009, Clayton Dukes wrote:
>> If you're using the latest version of php-syslog-ng it has a built in
>> deduplication function.
>> http://code.google.com/p/php-syslog-ng
>
>most syslog daemons have the ability to say 'last message repeated X 
>times'
>
>rsyslog has an option to include the message that was repeated at the end 
>of the 'last message repeated' line

Yeah I usually disable the "last message repeated X times" first thing
8-). However if you are getting multiple events/second then it's
usually easy enough to work around.

>I have rsyslog handling tens of thousands of messages/sec currently with 
>fairly low cpu utilization (<20% of one core) and tested it about 6 
>months ago up to ~80K messages/sec sustained, >300K messages/sec peak 
>(essentially wire speed of Gig-E). the current dev version has 
>significant improvements that should allow this to go significantly 
>higher, but the kinks are still being worked out of it.

Just out of curiosity how many of those messages are being passed to SEC?

--
                                -- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to