MsgBufferSize — Legacy

This documentation is for legacy Kiwi Syslog Server versions 9.8.3 and older.

Use this Kiwi Syslog Server registry setting to specify the maximum number of message buffer entries.

Section (32-bit Windows OS)	HKEY_LOCAL_MACHINE\SOFTWARE\SolarWinds\Syslogd\Properties
Section (64-bit Windows OS)	HKEY_LOCAL_MACHINE\Software\WOW6432Node\SolarWinds\Syslogd\Properties
Value (STRING)	MsgBufferSize
Min value	100
Max value	10000000 (10 million)
Default value	500000
Type	Maximum number of message buffer entries

As messages are received via the inputs (UDP, TCP, SNMP, Keep Alive), the messages are placed in an internal queue. The messages are then taken from the queue and processed in the order they arrived (FIFO). If a burst of messages arrive while the processing engine is busy, the messages are queued. This ensures messages are not lost under times of heavy load.

Each message that is queued uses a small amount of memory. In most situations, buffering up to 500,000 messages is sufficient. You may want to increase the buffer size in situations where messages are arriving in large bursts. The buffering will smooth the message flow and allow the processing engine to catch up when it can.

Messages are stored in Unicode which uses 2 bytes for each character. Therefore, if each message is 100 characters, it will occupy 200 bytes of memory. Messages can vary in size based on their content. 500,000 messages of 100 characters each will use 100,000,000 bytes (~100 MB) of memory. If each message was 200 characters long, it would use ~200 MB of memory. Memory is only used when the messages are being queued. Under normal traffic loads, the processing engine will be able to keep up with message flow and no messages will need to be queued.