Hi all,
I am trying to sort out performance problems on our NPM installation. I have done much of the big stuff to help (but stilol more to do), but i have started to look at syslog. I have syslog service running on ALL of my 5 pollers. I just noticed within the solarwinds.net event log, that an event is logged every time a syslog is received, that states the following:
Event Type: Information
Event Source: SyslogService
Event Category: None
Event ID: 0
Date: 25/11/2009
Time: 16:24:39
User: N/A
Computer: BT3NPM
Description:
Syslog ruleset of 7 rules loaded from database at 25/11/2009 04:24:39 pm
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Is it that Orion reads all of the rules from the database, every time a syslog is received? this must be causing a noticeable overhead on the database, and the polling server?
my current plan to stop this is to deploy a kiwi server on one of my pollers, and only forward useful syslogs to the NPM pollers...
any advice, or thoughts..
cheers
dan
