Angel, not sure if I fully understand your question, but maybe this helps? : 1) I think the default for syslog-ng to do stats is like 10 minutes, we changed it to do stats every hour in "options { stats (3600); };" 2) We didn't want this message filling up our console buffers of our terminal servers for machines and forcing important information off the screen, so we filtered this out for the console. We still wanted to keep the other internal generated messages like startups and restarts: filter f_intnotSTATS { not match("STATS: dropped"); }; log { source(int); filter (f_intnotSTATS); destination(console); }; ---------- So in a nutshell, you can change the time in options for "stats" and you can filter it by regex and take it out of source internal. On Tue, 21 Sep 2004 11:36:49 -0300, Angelita Soares de Camargos <anghelasc@gmail.com> wrote:
Hello everybody.
I installed the syslog-ng 1.6.5, storing the logs in mysql 4.0.21 and it seems to be working fine, but sometimes I get this message at the log: "STATS: dropped 0".
Reading older messages I understood that some log that did not match any of my filters and was flushed.
Well, how can I know what message is it. Below, a part of my syslog-ng.conf:
filter f_emerg { level(emerg); }; filter f_kern_info {facility(kern) and not priority(debug); }; filter f_user_info {facility(user) and not priority(debug); }; filter f_mail_info {facility(mail) and not priority(debug); }; filter f_daemon_info {facility(daemon) and not priority(debug); }; filter f_auth_info {facility(auth) and not priority(debug); }; filter f_cron_info {facility(cron) and not priority(debug); }; filter f_err {priority(err..emerg); }; filter f_messages{ not priority(debug); };
thanks in advance, Angel. _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html