[logs] Calculating events per sec

[Bennett Todd]

2007-06-06T17:05:46 Marcus J. Ranum:
> You can use 300 bytes as a good guesstimate of a typical log-line
> length for UNIX machines [...]

I'd suggest observing actual typical patterns there as well. I
just checked two machines; on a quiet and isolated workstation my
/var/log/messages averaged 84 characters per line; a logserver that
aggregates syslog for thousands of machines averaged 112 for one set
of facilities, 103 for another.

-Bennett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://www.loganalysis.org/pipermail/loganalysis/attachments/20070606/378fc23e/attachment.bin