Re: [fw-wiz] syslog and network management

On Fri, 22 Feb 2008, Brian Loe wrote:

On Thu, Feb 21, 2008 at 7:19 PM, <david@xxxxxxx> wrote:

if you end up doing much searching through your logs you can end up eating
a LOT more CPU then you imagine, especially as you correlate things and
end up searching for more related items at a time.

I've found that if you utilize, for instance, syslog-ng, you can split
up the log files based on whatever (device type, network, etc.).
Searching those smaller files is a lot less CPU intensive.

true, but I found that syslog-ng was far less effective at the more
important job of receiving syslog messages from the wire and writing them
to disk

David Lang
firewall-wizards mailing list

Relevant Pages

  • Re: [fw-wiz] syslog and network management
    ... up the log files based on whatever. ... Searching those smaller files is a lot less CPU intensive. ... busy syslog server running AIX with no problems. ...
  • [PATCH 1/2] Customize sched domain via cpuset (v2)
    ... This patch introduces new feature of cpuset - sched domain customization. ... enable us to change the searching range of scheduler, ... +When a task is woken up, scheduler try to move the task on idle CPU. ...
  • Re: CPU Usage: 100%
    ... I have found that interrupts and dpc,s are using up most of the cpu %. ... > Download and run Process Explorer. ... If you meant System Idle Process, ... You could always try searching for it ...
  • [PATCH] ppc32: Resurrect Documentation/powerpc/cpu_features.txt
    ... Searching through BK logs on didn't reveal anything, ... and if the CPU supports the DOZE and NAP ... +Detection of the feature set is simple. ... unused code is replaced by 'nop' instructions. ...
  • Re: svchost.exe occupy 99% CPU resource
    ... I know this string is very old, but if others are searching for an ... svchost.exe at 100% CPU usage. ... It was not a necessary program, so using ProcessExplorer I ... This was a horrible problem to solve and NO ONE ...