very busy syslog server

[Imri Zvik]

Hi,

First, thanks for the reply.

Now, I see that you too are missing messages....
I don't know when was the last time you rested the counters, but missing
22911 events is quite a lot :/

Thanks!
--
Imri Zvik
PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp
 

-----Original Message-----
From: Claus Guttesen [mailto:kometen at gmail.com] 
Sent: Wednesday, December 07, 2005 1:15 PM
To: Imri Zvik
Cc: freebsd-performance at freebsd.org
Subject: Re: very busy syslog server

> I'm trying to setup a syslog server to serve a large group of servers.
> For the syslog daemon, I have chosen rsyslogd, and the backend is
mysql (on a different
> machine).

Maby you could put the syslog-messages into a file and then import it
into mysql?

We have 10 webservers sending http-logs to one dual PIII.

syslog~#>netstat -s -p udp
udp:
        167166048 datagrams received
        0 with incomplete header
        0 with bad data length field
        0 with bad checksum
        19371 with no checksum
        810 dropped due to no socket
        18964 broadcast/multicast datagrams dropped due to no socket
        22911 dropped due to full socket buffers
        0 not for hashed pcb
        167123363 delivered
        122985843 datagrams output

They are kept in flat files.

regards
Claus