cancel
Showing results for 
Search instead for 
Did you mean: 

syslog.conf

SOLVED
Go to solution
KPS
Super Advisor

syslog.conf

Hi,

We've just enabled logging via syslogd and /etc/syslog.conf on our HP-UX 11.23 system to send login activity to a remote LogLogic Appliance. I'm wondering if there might be anything we ought to be concerned about with this in regard to performance impact on the HP-UX side where we're sending our logs from? We do not have a lot of interactive users on our systems if that would be one any concerns???

Any info would be greatly appreciated around this.

Thanks,
KPS
4 REPLIES
James R. Ferguson
Acclaimed Contributor
Solution

Re: syslog.conf

Hi KPS:

Of course there is an overhead in logging anything, but the question you have to ask yourself is it it measurable to _you_ in _your_ environment. I seriously doubt it in this case. If you are really worried, you will need to collect statistically significant performance measurements before and after arming your logging.

Regards!

...JRF...
KPS
Super Advisor

Re: syslog.conf

Thanks we'll roll this our carefully and monitor the activity with relation to the performance behavior.

Regards
KPS
Bill Hassell
Honored Contributor

Re: syslog.conf

The CPU usage related to logging will be insignificant. The real issue will be runaway log entries that can quickly create hundreds of megs of logfiles on the syslog server. The reverse is also true if your HP-UX system does the logging. Monitor filesystem space.


Bill Hassell, sysadmin
KPS
Super Advisor

Re: syslog.conf

Thanks for your additional information you provided Bill.