diff options
author | Costa Tsaousis <costa@netdata.cloud> | 2023-10-07 23:06:50 +0300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-10-07 23:06:50 +0300 |
commit | d766977fbb0c317abe60adc25d6fd4ce0ed44fde (patch) | |
tree | c1de628641c013089a4af2ebb004161bcb23faff /collectors | |
parent | 8011e5d701c79a16a9a1e200e5cbf5d46e8c7c1d (diff) |
Update README.md
Diffstat (limited to 'collectors')
-rw-r--r-- | collectors/systemd-journal.plugin/README.md | 27 |
1 files changed, 19 insertions, 8 deletions
diff --git a/collectors/systemd-journal.plugin/README.md b/collectors/systemd-journal.plugin/README.md index 910dfd583d..d228dfb9fd 100644 --- a/collectors/systemd-journal.plugin/README.md +++ b/collectors/systemd-journal.plugin/README.md @@ -197,16 +197,27 @@ of the files into memory, to satisfy each query. On logs aggregation servers, the performance of the queries depend on the following factors: -1. The number of files involved in each query. This is why we suggest to select a source when possible. -2. The speed of the disks hosting the journal files. Journal files perform a lot of reading while querying, so the fastest the disks, the faster the query will finish. -3. The memory available for caching parts of the files. Increased memory will help the kernel cache the most frequently used parts of the journal files, avoiding disk I/O and speeding up queries. -4. The number of filters applied. Queries are significantly faster when just a few filters are selected. +1. The **number of files** involved in each query. -In general, for a faster experience, keep a low number of rows within the visible timeframe. + This is why we suggest to select a source when possible. + +2. The **speed of the disks** hosting the journal files. -Even on long timeframes, selecting a couple of filters that will result in a few dozen thousand log entries -will provide fast / rapid responses, usually less than a second. To the contrary, viewing timeframes with millions -of entries may result in longer delays. + Journal files perform a lot of reading while querying, so the fastest the disks, the faster the query will finish. + +3. The **memory available** for caching parts of the files. + + Increased memory will help the kernel cache the most frequently used parts of the journal files, avoiding disk I/O and speeding up queries. + +4. The **number of filters** applied. + + Queries are significantly faster when just a few filters are selected. + +In general, for a faster experience, **keep a low number of rows within the visible timeframe**. + +Even on long timeframes, selecting a couple of filters that will result in a **few dozen thousand** log entries +will provide fast / rapid responses, usually less than a second. To the contrary, viewing timeframes with **millions +of entries** may result in longer delays. The plugin aborts journal queries when your browser cancels inflight requests. This allows you to work on the UI while there are background queries running. |