Syslog performance issue

All,

I am having an issue with my syslog server running 7.2.
When I tail the file, I see no activity for 5 to 10 seconds, then I get some entries, then a pauze again and so on.
A tcpdump is showing a constant flow of messages, but it seems syslog can't catch up?
I restarted the daemon, looked at the config, tried to run in debugmode but can't see anything wrong.

Any advice?

much appreciated!
 
Not really, because the messages don't show up, not even afterwards when I parse the syslog file. They are lost; the amount of messages coming in is definitely not the same as the syslog log is showing.
I have a similar setup (running FBSD v6.2) and there it works properly so it must be version or system specific...
 
If you have a very fixed set of hosts logging to one central server, add them to that server's /etc/hosts. Looks a bit prettier.
 
Back
Top