[syslog-ng]What means "dropped" ?

Loubet Jean-Michel syslog-ng@lists.balabit.hu
Fri, 6 Jun 2003 18:00:21 +0200


I've only got one syslog client host for my bench (solaris 6), and one
collector with syslog-ng 1.6.0rc3 (solaris 6).

Here are my global properties if you need them :

        keep_hostname(yes); 
        long_hostnames(no); 
        log_fifo_size(8192); 
        log_msg_size (2048);
        sync(1024); 
        use_time_recvd(yes);
        use_dns(no);
        use_fqdn(no);
        dns_cache(no);
        stats (4);


JM Loubet

> 
> I'll give you more informations :
> 
> Here are my bench's results :
> 
> 20000 msgs sent
> 19873 msgs written (after kill -HUP)
> 
> and my logs :
> 
> [...]
> STATS: dropped 0
> STATS: dropped 64
> STATS: dropped 1994
> STATS: dropped 2002
> STATS: dropped 1871
> STATS: dropped 1994
> STATS: dropped 1998
> STATS: dropped 1744
> STATS: dropped 71
> STATS: dropped 0
> [...]

each destination may drop messages, and this is an aggregated result.

(e.g. if you have 5 destinations, a single message may be counted 5 times,
provided all destinations were full)