#19 ntsyslog reads large amounts of data

[samd]

Not clear whether this is a bug or a feature:

On a system with about 1500 Messages per day in all categories, ntsyslog reads about 57 GB of data daily.

That seems to be far too much when it is just related to catch messages.

System: Win 2003 SP2

Any comment on that ?
Sam.

[tyrolean]

Logged In: YES
user_id=1623281
Originator: NO

Hi!

A few questions:
- Does ntsyslog sends the messages in the correct order?
- Are there duplicated messages?

Reading the eventlog beginns with the oldest message and the timestamp is compared,
to evaluate wheter the message have to processed ...
- How long eare the eventlog-files or how many messages are in the different categories?
- Does you restart the server daily (in the night)?

Best regards from Salzburg,
"frzem"

[Nobody/Anonymous]

Logged In: NO

Hi,

- Does ntsyslog sends the messages in the correct order?
YES

- Are there duplicated messages?
NO

- How long eare the eventlog-files or how many messages are in the
different categories?

application 10 MB
Directory Service 0.3 MB
DNS 0.06 MB
File Repl. 0.06 MB
Security 128 MB
System 16 MB

makes a total of about 155 MB

- Does you restart the server daily (in the night)?
NO

That's it.

Current ntsyslog status: 2.2 TB read / 54 MB written within 184 hours of runtime since last boot.

cheers. sam.

[Nobody/Anonymous]

Logged In: NO

oops.

one figure wrong: 1027 hours of windows runtime.