by dniesen » Wed Mar 10, 2010 4:49 pm
I had phpLogCon up pulling syslog entries from 5 different servers and noticed the same very slow search speeds when trying to filter by IP or find text.
I am using a MySQL database backend and taking a look at the tables, they are very simle. There was literally no indexing set up for any columns other than the ID column. I set up indexes for FromHost and a fulltext index for Message and search queries now come back nearly instantaneously. If you filter on other fields you will likely want indexes configured on the other fields in the "SystemEvents" table as well. I would imagine creating indexes on MS SQL and Postgres would solve this problem for a number of you.