Return
-
Title
Memory utilization is high on syslog ng servers -
Description
Memory utilization is high on syslog ng servers -
Cause
Configuration issue. The log-fifo-size was set too high causing syslog-ng to utilize too much memory. -
Resolution
1 - Edit the syslog-ng.conf file and lower the log_fifo_size.
We recommend setting it somewhere between 10,000 to 100,000. We recommend our Professional Services Organization for implementation advice. For information on how to contact them please visit https://support.oneidentity.com//professional-services-product-select
The log_fifo_size is the size of the overflow output buffer, meaning, how many logs can be stored in the buffer to be sent out. Default is 10,000.
The log-msg-size is the maximum length of a message in bytes. It is not recommend to set higher than 10 mb which is 10,485,760 bytes. Default is 65536 bytes.
log-fifo-size X log-msg-size x number of destinations = memory syslog-ng will use