How many folders/files nxlog can monitor?

Post a different question
2
responses

Hi,

I'm setting up nxlog on a window box to read files to send to elasticsearch, and I have some questions:

1) is there a limit on the number of im_file inputs that a output (om_tcp) can handle? And is nxlog reading those monitored files concurrently or in serial one after each other?

2) we can setup multiple paths in nxlog, different path means parallel processing, e.g. each path is handled by different threads??

3) can we install mutiple nxlog services in one box?

Thanks a lot!

AskedNovember 23, 2015 - 1:16pm

Answer (1)

It should be able to handle a couple thousand but checking through a large number of files uses more resources so it is always a good idea to move the files out of the way.

You can add multiple im_file instances. Each module instance is processed by a separate thread.

It's possible to run multiple nxlog instances with different config files on Linux/Unix. On windows this should be also possible with some sc.exe magic.

AnsweredNovember 23, 2015 - 6:39pm

Comments (1)

  • zpp's picture

    Thanks a lot for replying.

    "It should be able to handle a couple thousand but checking through a large number of files uses more resources so it is always a good idea to move the files out of the way" Unfortunately the log files I'm dealing with is from a third party software which cannot be changed. The log folder contains over 500 files/folders, is this considered a lot? And if the im_file is set to e.g. 'E:\applicationlogs\[A-Z]*.log.*', does nxlog search through the subfolders in E:\applicationlogs?

     

    November 24, 2015 - 3:21am