Statistics -- how do I turn them off?
My log file is filling up with statistics messages from syslog-ng (v. 3.1.2) , one message every 10 minutes. I tried turning it off by putting stats_freq(0) in the options clause, and restarted the syslog-ng daemon but that seems to have no effect. There must be something obvious I'm missing. -- Liam Kirsher PGP: http://liam.numenet.com/pgp/
I'm filtering statistical messages based on the internal source and the following regexp: filter f_internal_statistics { match("^syslog-ng\[[[:digit:]]+\]: STATS") or match ("^syslog-ng\[[[:digit:]]+\]: Log statistics"); }; (for 3.x only the latter match is needed) 600 seconds is the default setting, the timer gets activated only when stats_freq > 0 so stats_freq(0) should turn off the generation of statistical messages completely. Are the logs generated on the same host or are you processing remote logs as well? On Sat, Oct 30, 2010 at 10:17 PM, Liam Kirsher <liamk@numenet.com> wrote:
My log file is filling up with statistics messages from syslog-ng (v. 3.1.2) , one message every 10 minutes. I tried turning it off by putting stats_freq(0) in the options clause, and restarted the syslog-ng daemon but that seems to have no effect. There must be something obvious I'm missing.
-- Liam Kirsher PGP: http://liam.numenet.com/pgp/
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
Hi Anybody can tell am using Solaris OS v 10 . Like to install php-syslog-ng GUI tools . where should I get the same as well as provide me some documentation for the same. Sasanka -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Sandor Geller Sent: Tuesday, November 02, 2010 4:12 PM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] Statistics -- how do I turn them off? I'm filtering statistical messages based on the internal source and the following regexp: filter f_internal_statistics { match("^syslog-ng\[[[:digit:]]+\]: STATS") or match ("^syslog-ng\[[[:digit:]]+\]: Log statistics"); }; (for 3.x only the latter match is needed) 600 seconds is the default setting, the timer gets activated only when stats_freq > 0 so stats_freq(0) should turn off the generation of statistical messages completely. Are the logs generated on the same host or are you processing remote logs as well? On Sat, Oct 30, 2010 at 10:17 PM, Liam Kirsher <liamk@numenet.com> wrote:
My log file is filling up with statistics messages from syslog-ng (v. 3.1.2) , one message every 10 minutes. I tried turning it off by putting stats_freq(0) in the options clause, and restarted the syslog-ng daemon but that seems to have no effect. There must be something obvious I'm missing.
-- Liam Kirsher PGP: http://liam.numenet.com/pgp/
________________________________________________________________________ ______
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
________________________________________________________________________ ______ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com
Sandor, Thanks for you response. The logs are generated on the same host. (Originally there were separate hosts logging to this host, but we consolidated them onto the single server.) Hmm. Just noticed that there seem to be two processes running! On further inspection one of them was reading the /etc/syslog-ng/syslog-ng.conf file and the other must have been reading the one in /opt/syslog-ng/etc/syslog-ng.conf I put SYSLOGNG_OPTIONS="$SYSLOGNG_OPTIONS --cfgfile /etc/syslog-ng/syslog-ng.conf" in /etc/default/syslog-ng and it seems to be working now. Well, actually, every 20 minutes now getting messages saying* Nov 2 21:21:01 domU-12-31-39-07-3D-F1 -- MARK -- * And am able to turn it off with mark_freq(0). Okay, everything's good. Thanks. Liam Sandor Geller wrote:
I'm filtering statistical messages based on the internal source and the following regexp:
filter f_internal_statistics { match("^syslog-ng\[[[:digit:]]+\]: STATS") or match ("^syslog-ng\[[[:digit:]]+\]: Log statistics"); };
(for 3.x only the latter match is needed)
600 seconds is the default setting, the timer gets activated only when stats_freq > 0 so stats_freq(0) should turn off the generation of statistical messages completely. Are the logs generated on the same host or are you processing remote logs as well?
On Sat, Oct 30, 2010 at 10:17 PM, Liam Kirsher <liamk@numenet.com> wrote:
My log file is filling up with statistics messages from syslog-ng (v. 3.1.2) , one message every 10 minutes. I tried turning it off by putting stats_freq(0) in the options clause, and restarted the syslog-ng daemon but that seems to have no effect. There must be something obvious I'm missing.
-- Liam Kirsher PGP: http://liam.numenet.com/pgp/
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
-- Liam Kirsher PGP: http://liam.numenet.com/pgp/
participants (3)
-
Liam Kirsher
-
Sandor Geller
-
sasanka.sahu＠wipro.com