Syslog-ng и нагрузка на CPU

[bikeRR]

Следующий конфиг сабжа нехило подгружает 4-х процессорный сервер (30-40%), хотя особенного там ничего не крутится - dns,postfix..

 

options {

sync (0);

time_reopen (10);

log_fifo_size (2048);

long_hostnames (off);

use_dns (yes);

dns_cache (yes);

use_fqdn (yes);

create_dirs (no);

keep_hostname (yes);

};

source s_sys {

file ("/proc/kmsg" log_prefix("kernel: "));

unix-stream ("/dev/log" max_connections(2000));

internal();

};

########### CISCO-LOGs #####################

source s_cisconetwork { udp(); };

destination d_host { file("/var/log/cisco/$HOST" create_dirs(yes)); };

destination d_mysql { pipe("/var/log/mysql.pipe" template("INSERT INTO logs (host, facility, priority, level, tag, datetime, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n") template-escape(yes)); };

log { source(s_cisconetwork); destination(d_host); };

log { source(s_cisconetwork); destination(d_mysql); };

###############################################

destination d_cons { file("/dev/console"); };

destination d_mesg { file("/var/log/messages"); };

destination d_auth { file("/var/log/secure"); };

destination d_mail { file("/var/log/maillog"); };

destination d_spol { file("/var/log/spooler"); };

destination d_boot { file("/var/log/boot.log"); };

destination d_cron { file("/var/log/cron"); };

destination d_mlal { usertty("*"); };

 

filter f_filter2 { level(info..emerg) and not facility(mail,authpriv,cron); };

filter f_filter3 { facility(authpriv); };

filter f_filter4 { facility(mail); };

filter f_filter5 { level(emerg); };

filter f_filter6 { facility(uucp) or (facility(news) and level(crit..emerg)); };

filter f_filter7 { facility(local7); };

filter f_filter8 { facility(cron); };

 

#log { source(s_sys); filter(f_filter1); destination(d_cons); };

log { source(s_sys); filter(f_filter2); destination(d_mesg); };

log { source(s_sys); filter(f_filter3); destination(d_auth); };

log { source(s_sys); filter(f_filter4); destination(d_mail); };

log { source(s_sys); filter(f_filter5); destination(d_mlal); };

log { source(s_sys); filter(f_filter6); destination(d_spol); };

log { source(s_sys); filter(f_filter7); destination(d_boot); };

log { source(s_sys); filter(f_filter8); destination(d_cron); };

 

 

В чем может быть проблема?

use_dns (no); особо не помогает