Syslog CPU/Mem/IO Usage?



Hey guys,
I have a general question regarding syslog and its imposed usage on
the CPU/Mem/IO especially around scheduled cronjobs. We're currently
logging close to around 1.5-2gb of logs daily. One of the logs grows to
about 700-900mb daily on average. And, at least before we make the
changes, messages has duplicating the same entries (so
/var/log/messages 700-900mb+).
The concern we have is if any log entries might be dropping, or if
it's not even close to a possibility that they are dropping. One of my
coworkers expressed this concern, especially when crons are kicked off
- we have all the basic crons running daily: anacron, logrotate,
slocate, etc. Should we be concerned about the system not being able to
cache & buffer everything to the point where it starts dropping
information?
The hardware setup is pretty beefy as it is, so I wouldn't suspect
anything. But I wanted to make sure. My limited knowledge of the server
we're running:

Fedora Core 5 (2.6.15-1.2054_FC5smp)
3ghz Pentium 4 (I believe hyperthreading)
1gb RAM (DDR I'm suspecting - not sure of the bus speed)
Hardware Raid 5 setup over SATA (probably 4x 160gb)

Any ideas?
If this is sufficient enough for what we're doing now, is there a
'threshold' at which syslog, if ever, would drop its logging?

As of yet, I haven't noticed any major issues where there are gaps in
the logs. But I just wanted to find out if this is something to be
concerned about in the near-future as we expect our logging to
increase.

.



Relevant Pages

  • Re: Microsoft IAS - How to store accounting logs?
    ... we also use syslog for all this logging. ... i think this is the best method to handle all this logging stuff. ... So I understand that IAS can put the logs into SQL database, ...
    (microsoft.public.internet.radius)
  • Re: Solaris 10: SMF logging
    ... 'init' while syslog is basicly a logging daemon, ... There are times where you will only have SMF facilities, ... also give you fair hints on how to in/de -crease the logging verbosity. ... it logs to the directory and thats basicly it... ...
    (comp.unix.solaris)
  • Re: ** server cant find barcelonamedia.org.barcelonamedia.org: SERVFAIL
    ... bind uses to log to syslog. ... (I have debian too but I use my own logging scheme) ... Also attatch my /etc/bind/named.conf to see if the logs should be somewhere. ... until you have massively updated the init script or logging ...
    (comp.protocols.dns.bind)
  • Re: Logging and Auditing of a HP-UX box
    ... Would members of this group kindly tell me the auditing and logging ... You can expect the syslog system to be always enabled, ... All syslog messages consist of a level identifier, ... commands to control the audit log system from the command ...
    (comp.security.unix)
  • RE: [fw-wiz] Log checking?
    ... tend to evaluate where and what logging is important in a different light. ... I've been happy to analyze a year's worth of firewall denied logs, ... have denied firewall traffic logs or denied logs with any relevant data. ...
    (Firewall-Wizards)