Date parsed: 2/28/2001 6:00:37 AM
Date: Wed, 28 Feb 2001 12:00:37 -0500

Currently, I have SL4NT monitoring just my INFO level syslogs from my Cisco
PIX (soon to be 10 more network devices, but they are about 100x less chaty)
On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt
increase as I add more and more incoming syslogs. All of which will be
written to an individual log file. And on top of that some notification
rules <10.
Is this % of utilization expected?


-Chris

Date parsed: 2/28/2001 8:58:08 PM
Date: Wed, 28 Feb 2001 20:58:08 +0100

Chris,

please use Performance/System Monitor to measure counters of the "Syslog
Service" object. Please tell me more about how many messages are received
and processed per second.

Franz

"Chris Schuler" <cschuler@mindleaders.com> wrote in message
news:GSqbIgaoAHA.1656@is1.netal.com...
> Currently, I have SL4NT monitoring just my INFO level syslogs from my
Cisco
> PIX (soon to be 10 more network devices, but they are about 100x less
chaty)
> On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt
> increase as I add more and more incoming syslogs. All of which will be
> written to an individual log file. And on top of that some notification
> rules <10.
> Is this % of utilization expected?
>
>
> -Chris
>
>

Date parsed: 9/10/2001 7:45:03 AM
Date: Mon, 10 Sep 2001 14:45:03 -0600

Will SL4NT use additional processors if available?

\
"Chris Schuler" <cschuler@mindleaders.com> wrote in message
news:GSqbIgaoAHA.1656@is1.netal.com...
> Currently, I have SL4NT monitoring just my INFO level syslogs from my
Cisco
> PIX (soon to be 10 more network devices, but they are about 100x less
chaty)
> On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt
> increase as I add more and more incoming syslogs. All of which will be
> written to an individual log file. And on top of that some notification
> rules <10.
> Is this % of utilization expected?
>
>
> -Chris
>
>

Date parsed: 9/10/2001 11:57:39 PM
Date: Mon, 10 Sep 2001 22:57:39 +0200

Hi Michael,

SL4NT uses one thread for receiving syslog messages from the network layer
and then queues them for processing by the rule engine, which runs its in
own thread.
In addition, there's a separate thread for the action handler which
processes all actions of the same type (these action handler threads are
created on demand and they will terminate themselfs if there's nothing to
do).

This implies that SL4NT will scale nicely on SMP computers.

Franz

"Michael Harvey" <michael.harvey@axia.com> wrote in message
news:mrKJoojOBHA.1632@is1.netal.com...
> Will SL4NT use additional processors if available?
>
> \
> "Chris Schuler" <cschuler@mindleaders.com> wrote in message
> news:GSqbIgaoAHA.1656@is1.netal.com...
> > Currently, I have SL4NT monitoring just my INFO level syslogs from my
> Cisco
> > PIX (soon to be 10 more network devices, but they are about 100x less
> chaty)
> > On a Dual 733, im sitting at 50% CPU utilization. I hope this doesnt
> > increase as I add more and more incoming syslogs. All of which will be
> > written to an individual log file. And on top of that some notification
> > rules <10.
> > Is this % of utilization expected?
> >
> >
> > -Chris
> >
> >
>
>