Hi.
I have a single rsyslog server (on cloud) receiving logs from a number of systems (also in cloud). I am planning to add a second server and use NFS cloud storage as the backend. This storage will be shared across the two syslog systems.
At the moment, the single rsyslog system receives around 380.000 messages per minute and stores them on local disk.
The reason for opting NFS shared storage is that logs from systems will be on one location instead of two. For example, without shared storage and due to load balancing, Monday logs from serverA can be found in rsyslog1 server and Tuesday logs for same server can be on rsyslog2 server.
However, I am thinking about the performance of NFS and the (negative) impact that it could cause on rsyslog. I am concerned about:
* NFS deadlocks
* behaviour when two rsyslog processes write to same file
* encryption and network delay of NFS backend
* rotation of files
Has anyone implemented such rsyslog setup and found it problematic?
Any thoughts/comments for such setup?
Thanks
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
I have a single rsyslog server (on cloud) receiving logs from a number of systems (also in cloud). I am planning to add a second server and use NFS cloud storage as the backend. This storage will be shared across the two syslog systems.
At the moment, the single rsyslog system receives around 380.000 messages per minute and stores them on local disk.
The reason for opting NFS shared storage is that logs from systems will be on one location instead of two. For example, without shared storage and due to load balancing, Monday logs from serverA can be found in rsyslog1 server and Tuesday logs for same server can be on rsyslog2 server.
However, I am thinking about the performance of NFS and the (negative) impact that it could cause on rsyslog. I am concerned about:
* NFS deadlocks
* behaviour when two rsyslog processes write to same file
* encryption and network delay of NFS backend
* rotation of files
Has anyone implemented such rsyslog setup and found it problematic?
Any thoughts/comments for such setup?
Thanks
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.