MonitorWare Knowledge Base

Can anyone tell me how many syslogs a second is can be received by the WinSyslog product?

Hi,

this is hard to say. But because WinSyslog has a very powerful engine, it is quiet a lot, at least on a slow machine.

When WinSyslog receives syslog messages over UDP, it directly stores them in memory first, and listens for the next syslog message again.
Another part of WinSyslog then starts processing this message.
But there is no value I can give you.

It largely depends on the hardware used. As a background, WinSyslog has been highly optimized to take care of traffic bursts. The receiver threads inside the product run with highest priority and just grab received messages of the network card and put them into memory. Then they are finished. Another, lower priority, thread then processes these messages. This architecture allows for very high bursts of traffic as long as there is enough physical memory (obviously, you don't want the OS to swap here...) and there are phases with less activity so the messages can be processed and the receive queue be emptied.

I know from some customers claiming to run bursts of several hundered messages per second.

I hope this helps, though I have to admit it might not be as clear an answer as you had expected. Sorry for that.

Rainer Gerhards
Adiscon