<div dir="auto">Hi,<div dir="auto"><br></div><div dir="auto">Your stats level is probably set to 3, which means that we keep a counter for each $PROGRAM field that we receive.</div><div dir="auto"><br></div><div dir="auto">Sometimes parsing the program name field fails or it contains a Cisco style sequence number.</div><div dir="auto"><br></div><div dir="auto">Hope this helps,</div><div dir="auto"><br></div><div dir="auto">PS: if this is a PE version, you might want to contact the official support as well.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Oct 31, 2017 21:34, "Schoonover, Mark E HHHH" <<a href="mailto:Mark.Schoonover@cigna.com">Mark.Schoonover@cigna.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="m_6658897894683514704WordSection1">
<p class="MsoNormal">Hello,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I’m working on a Splunk dashboard for our NG PE servers. Looking at the stats from the output of /opt/syslog-ng/sbin/syslog-ng-<wbr>ctl stats, this one has me puzzled:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span class="m_6658897894683514704t"><span style="font-size:9.0pt;font-family:Consolas;color:#3863a0;border:solid #fae4ad 3.0pt;padding:0in;background:#fae4ad">src.program</span></span><span style="font-size:9.0pt;font-family:Consolas;color:#333333">,,<span class="m_6658897894683514704t"><a href="tel:(49)%20587%20758" value="+3649587758" target="_blank">49587758</a></span>,<span class="m_6658897894683514704t">d</span>,<span class="m_6658897894683514704t">proces<wbr>sed</span>,1</span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I don’t know what “program” means as well as the 3<sup>rd</sup> column. I understand the remaining columns. What do they mean?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks!<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-family:Consolas">Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Consolas"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:Consolas">Mark Schoonover – KA6WKE<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Consolas">Infrastructure Engineering Manager, Splunk Architect<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Consolas">ENE : Tools, Instrumentation and Common Services Team<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Consolas">Office: 32.8697° N, 116.9711° W
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Consolas">Phone : 770-261-7934 <u></u>
<u></u></span></p>
<p class="MsoNormal"><span style="font-family:Consolas">Email : <a href="mailto:mark.schoonover@cigna.com" target="_blank">
mark.schoonover@cigna.com</a><u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1f497d">HPSM Team: ENE NMS Engineering<u></u><u></u></span></b></p>
<p class="MsoNormal"><span style="font-family:Consolas"><u></u> <u></u></span></p>
<p class="MsoNormal"><i><span style="color:#1f497d">Confidential, unpublished property of CIGNA. Do not duplicate or distribute. Use and distribution limited solely to authorized personnel. © Copyright 2017 CIGNA<u></u><u></u></span></i></p>
<p class="MsoNormal"><span style="font-family:Consolas"><u></u> <u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p>------------------------------<wbr>------------------------------<wbr>------------------<br>CONFIDENTIALITY NOTICE: If you have received this email in error,<br>please immediately notify the sender by e-mail at the address shown. <br>This email transmission may contain confidential information. This <br>information is intended only for the use of the individual(s) or entity to <br>whom it is intended even if addressed incorrectly. Please delete it from <br>your files if you are not the intended recipient. Thank you for your <br>compliance. Copyright (c) 2017 Cigna<br>==============================<wbr>==============================<wbr>==================</p></div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div></div>