1 Graylog server, 2 XS hosts, 4 Million messages/week

[momurda]

Here is the top ten message generators in my XS 6.5 production environment(2 hosts) over 1 week of time
Seems like quite a bit of syslog action going on all the time in XS.

Just curious if others are seeing similar numbers

[thwr]

Don't have a number at hand, but my pfSense is pretty chatty about rules being hit I'm using Graylog2 too.

Can't help with your spamming XS hosts but can't you reduce the log level or select which events are sent? rsyslog can be configured to just sent specific facilities and/or loglevels.

[travisdh1]

@thwr said in 1 Graylog server, 2 XS hosts, 4 Million messages/week:

Don't have a number at hand, but my pfSense is pretty chatty about rules being hit I'm using Graylog2 too.

Can't help with your spamming XS hosts but can't you reduce the log level or select which events are sent? rsyslog can be configured to just sent specific facilities and/or loglevels.

Sadly XS just does logging a little differently.