Re: Calculating events per sec

Marcus J. Ranum wrote:

> Bear in mind that logs may be quite "bursty" depending on what
> is happening and if something happens that affects a large number
> of machines, the "burstiness" can cause the dam to burst, too. :)

I know you may not wish to go that route, but this is a rather simple
queueing network problem, so if you know the infrastructure of your
logging system you may model it mathematically and know exactly how the
"burstiness" may affect it.

A helper application: http://jmt.sourceforge.net/

Stefano