Re: [syslog-ng] Reading Log file

On Thu, 10 Mar 2011 09:23:16 -0600 Martin Holste <mcholste@gmail.com> wrote:

Yep, you're dropping most of your messages to SQL. Your dropped stats should equal 0 if you're not dropping any messages. The stats are

Drop counters can increment due to reasons besides load. A message might not be inserted into the database due to an error, perhaps a type constraint for instance. Normally syslog-ng will log multiple failed attempts, give up and increment the drop counter per failure. John