[rsyslog-notify] Forum Thread: Re: EMFILE (Too many open files) - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24311#p24311

Message: 
----------
That sounds like a good thing to try.

This sounds like a bug, but Rainer will need to take a look at it, but he's
on vacation for a few days.

If nothing else, a work-around would be to run multiple instances of
rsyslog and split the incoming connections between them. iptables has
mechanisms that will let you do this on a single machine transparent to the
sender, but it's a bit messy to setup

At that sort of scale, I would seriously consider adding a tier of
aggregators in the middle. Aggregate machines by environment/network and
then forward them on.