Date: Wed, 28 Feb 2001 12:00:37 -0500

Currently, I have SL4NT monitoring just my INFO level syslogs from my Cisco

PIX (soon to be 10 more network devices, but they are about 100x less chaty)

On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt

increase as I add more and more incoming syslogs. All of which will be

written to an individual log file. And on top of that some notification

rules <10.

Is this % of utilization expected?

-Chris

Date: Wed, 28 Feb 2001 20:58:08 +0100

Chris,

please use Performance/System Monitor to measure counters of the "Syslog

Service" object. Please tell me more about how many messages are received

and processed per second.

Franz

"Chris Schuler" <cschuler@mindleaders.com> wrote in message

news:GSqbIgaoAHA.1656@is1.netal.com...

> Currently, I have SL4NT monitoring just my INFO level syslogs from my

Cisco

> PIX (soon to be 10 more network devices, but they are about 100x less

chaty)

> On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt

> increase as I add more and more incoming syslogs. All of which will be

> written to an individual log file. And on top of that some notification

> rules <10.

> Is this % of utilization expected?

>

>

> -Chris

>

>

Date: Mon, 10 Sep 2001 14:45:03 -0600

Will SL4NT use additional processors if available?

\

"Chris Schuler" <cschuler@mindleaders.com> wrote in message

news:GSqbIgaoAHA.1656@is1.netal.com...

> Currently, I have SL4NT monitoring just my INFO level syslogs from my

Cisco

> PIX (soon to be 10 more network devices, but they are about 100x less

chaty)

> On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt

> increase as I add more and more incoming syslogs. All of which will be

> written to an individual log file. And on top of that some notification

> rules <10.

> Is this % of utilization expected?

>

>

> -Chris

>

>

Date: Mon, 10 Sep 2001 22:57:39 +0200

Hi Michael,

SL4NT uses one thread for receiving syslog messages from the network layer

and then queues them for processing by the rule engine, which runs its in

own thread.

In addition, there's a separate thread for the action handler which

processes all actions of the same type (these action handler threads are

created on demand and they will terminate themselfs if there's nothing to

do).

This implies that SL4NT will scale nicely on SMP computers.

Franz

"Michael Harvey" <michael.harvey@axia.com> wrote in message

news:mrKJoojOBHA.1632@is1.netal.com...

> Will SL4NT use additional processors if available?

>

> \

> "Chris Schuler" <cschuler@mindleaders.com> wrote in message

> news:GSqbIgaoAHA.1656@is1.netal.com...

> > Currently, I have SL4NT monitoring just my INFO level syslogs from my

> Cisco

> > PIX (soon to be 10 more network devices, but they are about 100x less

> chaty)

> > On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt

> > increase as I add more and more incoming syslogs. All of which will be

> > written to an individual log file. And on top of that some notification

> > rules <10.

> > Is this % of utilization expected?

> >

> >

> > -Chris

> >

> >

>

>