Orion Syslog Volume Capacity?

byrona

I was curious if anybody has any idea of how well Orion handles large quantities of Syslog/Eventlog messages?

Is there a capacity that I need to keep in mind?

How significant of an effect does this have on the database size?

We are planning to use Orion for our Syslog data but I want to make sure that our design will work.

Thanks in advance for any response!

Find more posts tagged with

database_size

syslog

event_log

orion

Accepted answers

All comments

bshopp

What kind of Syslog volume are you talking about and the DB size will depend on how long you intend to keep Syslog message for

lchance

I get about 500,000 SYSLOG events per day and keep these for 21 days and it takes up around 300MB space of my 90GB NetPerfMon database.

HTH...

byrona

Well, I am expecting 1.5 - 2 Gb of logs per day.

byrona

The 1.5 - 2 Gb per day is based on the space they take up on ou current syslog-ng system.

lchance

NOTE:

My space of 300MB is misleading and I apologize - I have several Rules filtering unwanted SYSLOG events out of those 500,000 per day. What I want from the leftovers is using that 300MB space. If it were the entire 500,000 then it would be closer to 4GB space for all SYSLOG events.

lchance

If you only need a SYSLOG event for an alert then why not set your logging to only 4 days. Maybe that would cover the weekends and holidays.

You could write an Advanced Alert to offload anything into another archive file and/or log to SAN or NAS.

Horch

I can tell you from the school of hard knocks.... Syslog can seriously ruin overall Solarwinds NPM performance!! If your NPM runs like a sick dog, then look at what you're doing with syslog data. set your duration down to 7 days (the default), and purge any old records the the DB syslog table.