Re: Calculating events per sec

Bennett Todd <[email protected]> Wed, 6 Jun 2007 20:04:11 +0000

Newsgroups	gmane.comp.sysutils.loganalysis
Message-ID	<[email protected]>

2007-06-06T17:05:46 Marcus J. Ranum:
> You can use 300 bytes as a good guesstimate of a typical log-line
> length for UNIX machines [...]

I'd suggest observing actual typical patterns there as well. I
just checked two machines; on a quiet and isolated workstation my
/var/log/messages averaged 84 characters per line; a logserver that
aggregates syslog for thousands of machines averaged 112 for one set
of facilities, 103 for another.

-Bennett

_______________________________________________
LogAnalysis mailing list
[email protected]
http://www.loganalysis.org/mailman/listinfo/loganalysis

signature.asc (application/pgp-signature, 189 B)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGZxM7HZWg9mCTffwRAhm4AKCN5OvtSuElIyRgoICm9alYbGmwcQCfVTXp
QOaIFUKE7WB0dpG7FeeiBKI=
=70Kg
-----END PGP SIGNATURE-----