syslogd - maximum connections 1

[PoovanKozhi]

I am planning to centralize syslog to one single server. We have around 800 servers in our farm.
Are there any limitations in forwarding the errpt and syslog to a single server? The question is mainly in terms of maximum number of connections a single server can handle.

I couldn't find much information from syslog.conf or man pages. What happen if all the 800 servers try to send messages at the same time?

Do syslog provide a queueing mechanism?

 

[unixfreak]

Syslog uses UDP:

morsing@emil:~$ grep sysl /etc/services
syslog 514/udp


So, connectionless. Shouldn't be a problem

 

[PoovanKozhi]

Thanks.. So I think it is not going queue if the network is down for some time. We may loose the messages for that period of time. Is that correct?

 

[unixfreak]

Yes, I'm pretty sure you're going to lose messages if they can't be recieved by the server