Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Syslog: How much can the syslog engine take?

We currently have a LogLogic appliance taking and storing all of our syslog messages. It recieves an average of 800 messages per second.

If I moved this to Orion, would I hurt the performance of Orion?

I currently have NPM, APM, NTA, IPSLA, IPAM, UDT (soon), 2 additional pollers. Main system is a 32 CPU server with 32Gb RAM currently averaging 30% CPU.

I only need to keep thelogs for a week or so....

Just looking for opinions....

I am trying to purchase "Log & Event Monitor" but we have little in the budget right now....

Find more posts tagged with

syslog

Accepted answers

byrona

In my experience this volume of logs will likely cause problems for your Orion system. It has less to do with your pollers and more to do with your database, it basically overwhelms the database. This is especially the case if you have NTA in addition to NPM and APM as all of those put a good load on the DB.

This is based on my previous experiences with Syslog and Orion, others may have had better experiences getting this to work.

All comments

byrona

This is based on my previous experiences with Syslog and Orion, others may have had better experiences getting this to work.

mdriskell

Not syslog but I did have performance issues when receiving several hundred traps per second a few years back. Honestly don't know however if it was the database or the poller that was the bottleneck.