[syslog-ng]What means "dropped" ?

[Balazs Scheidler]

On Fri, Jun 06, 2003 at 04:28:03PM +0200, Loubet Jean-Michel wrote:
> 
> >On Fri, Jun 06, 2003 at 03:36:44PM +0200, Loubet Jean-Michel wrote:
> >> Hi,
> >> 
> >> I don't really understand what means "dropped" in stats. I've done benchs
> >> and I didn't found any correlation between really dropped messages and
> the
> >> number in dropped stats.
> >
> >DROPPED is the number of messages dropped by syslog-ng itself. It does not
> >count messages dropped due to full socket buffers (as they are dropped by
> >the kernel and not syslog-ng)
> 
> I'll give you more informations :
> 
> Here are my bench's results :
> 
> 20000 msgs sent
> 19873 msgs written (after kill -HUP)
> 
> and my logs :
> 
> [...]
> STATS: dropped 0
> STATS: dropped 64
> STATS: dropped 1994
> STATS: dropped 2002
> STATS: dropped 1871
> STATS: dropped 1994
> STATS: dropped 1998
> STATS: dropped 1744
> STATS: dropped 71
> STATS: dropped 0
> [...]

each destination may drop messages, and this is an aggregated result.

(e.g. if you have 5 destinations, a single message may be counted 5 times,
provided all destinations were full)

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1