Normally, if an IP address is not found in the DNS cache, the program will wait for a set period of time for the IP address to finish resolving. Under heavy load this delay can fill the message input buffer until it overflows and drops new messages.
Use this Kiwi Syslog Server registry setting to specify how full the input message buffer can get before disabling the DNS resolution waiting. By default, when the input buffer reaches more than 10% of capacity, the Syslog Server will stop waiting for the IP addresses to be resolved.
If you have preemptive lookup enabled, the IP addresses will still be resolved in the background and results placed in the cache. This option just disables the "DNS timeout" waiting period while the buffer is under load. This frees the program up so that it can process the buffered messages without waiting for resolutions to occur.
When the input buffer level drops below the set value, the normal resolution waiting timeouts will be re-enabled.
|Section (32-bit Windows OS)||HKEY_LOCAL_MACHINE\SOFTWARE\SolarWinds\Syslogd\Properties|
|Section (64-bit Windows OS)||HKEY_LOCAL_MACHINE\Software\WOW6432Node\SolarWinds\Syslogd\Properties|