Hi,
I like the method of indexing files as they appear in the syslog-ng log directory where each host goes to a different file. It makes it easier to search by source when setting source as a part of the path and saving each file in a directory names "something/$HOST".
The problem I see is if we end up having 10000 hosts logging on this syslog-ng, we may end up having an open file limit on the os or the app.
Anyone knows of a hard limit on open files OR some soft limits parameters (memory, throughput, etc) that would cause problems and what those limits are?
I'd like to have both the Linux and Windows point of view if you have any experience with one of these.
Thanks
... View more