1 Graylog server, 2 XS hosts, 4 Million messages/week



  • Here is the top ten message generators in my XS 6.5 production environment(2 hosts) over 1 week of time
    Seems like quite a bit of syslog action going on all the time in XS.

    0_1474308334183_upload-a62d932b-ef21-461e-8d38-5e4f06a6effc

    Just curious if others are seeing similar numbers



  • Don't have a number at hand, but my pfSense is pretty chatty about rules being hit 😉 I'm using Graylog2 too.

    Can't help with your spamming XS hosts but can't you reduce the log level or select which events are sent? rsyslog can be configured to just sent specific facilities and/or loglevels.



  • @thwr said in 1 Graylog server, 2 XS hosts, 4 Million messages/week:

    Don't have a number at hand, but my pfSense is pretty chatty about rules being hit 😉 I'm using Graylog2 too.

    Can't help with your spamming XS hosts but can't you reduce the log level or select which events are sent? rsyslog can be configured to just sent specific facilities and/or loglevels.

    Sadly XS just does logging a little differently.


Log in to reply