paleg / eventlog-to-syslog

Automatically exported from code.google.com/p/eventlog-to-syslog
3 stars 3 forks source link

2008 R2 performance issues. #52

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1.Install on 2008 R2 server 
2.Used 64 bit version of evtsys
3.

What is the expected output? What do you see instead?

Evtsys eats 50% (or more)

What version of the product are you using? On what operating system?

Windows 2008 R2 (in VMWare ESX).   
Evtsys_4.4.1_32-Bit.zip

Please provide any additional information below.

These systems (multiple 2008 R2) all exhibit  the same behavior.  Under normal 
load,  they hover around 1-5% CPU utilization.  When evtsys is loaded,  the CPU 
lusage jumps to 50%+.   These systems are acting as domain controllers and do 
produce a good bit of logs.  Using the evtsys filtering feature (in the 
evtsys.cfg),  we've been able to improve the signal/noise ratio,  but the load 
remains the same.   One thought is that this is related to issue: 

http://code.google.com/p/eventlog-to-syslog/issues/detail?id=39&can=1

Can this be verified?  If so,  would I need to build/compile my own evtsys? 
Thank you.

Original issue reported on code.google.com by dabeave@gmail.com on 13 Dec 2011 at 9:06

GoogleCodeExporter commented 8 years ago
FYI since building it myself I've had far fewer issues with evtsys.

Original comment by bab...@gmail.com on 14 Dec 2011 at 5:39

GoogleCodeExporter commented 8 years ago
Yes, building from the trunk yourself provides a bugfix that fixes the 
performance issues on 2008 R2. I've been holding off on making a new release in 
order to complete some features I have been working on. Unfortunately it is 
taking me longer than expected due to limited time.

I will go ahead and do a release for this minor update tonight for those who 
need the fix. The release number should be 4.4.2

Original comment by sherwin....@gmail.com on 15 Dec 2011 at 2:31

GoogleCodeExporter commented 8 years ago
Thank you very much.  I was trying to build a 64 bit version with VS 2010 
without any luck.  I really appreciate the new build

Original comment by dabeave@gmail.com on 15 Dec 2011 at 2:20