Yo Scott! On Wed, 11 May 2016 17:42:34 -0700 "Scott Weeks" <surfer@mauigateway.com> wrote:
If all logs are sent to a unix server that does syslogd the log entries would go into the file in order no matter what timestamp is on them.
syslogd can have quite large buffers. ---------------------------------------
Wouldn't the buffers empty in a FIFO manner?
Nope, each local syslog waits until its local buffer is full, or timed out, then sends to the main syslog server. The default flush_timeout() for syslog-ng is 10 seconds. That is a long time when debugging SIP. http://www.syslog.org/syslog-ng/v2/ RGDS GARY --------------------------------------------------------------------------- Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703 gem@rellim.com Tel:+1 541 382 8588