[syslog-ng]STATS: dropped 0

[Angelita Soares de Camargos]

Dave,

I think this will solve my question.

Thank's a lot.
Angel.


On Tue, 21 Sep 2004 09:53:00 -0500, Dave Johnson <davejjohnson@gmail.com> wrote:
> Angel,
> 
> not sure if I fully understand your question, but maybe this helps? :
> 
> 1) I think the default for syslog-ng to do stats is like 10 minutes,
> we changed it to do stats every hour in "options { stats (3600); };"
> 2) We didn't want this message filling up our console buffers of our
> terminal servers for machines and forcing important information off
> the screen, so we filtered this out for the console.  We still wanted
> to keep the other internal generated messages like startups and
> restarts:
> filter f_intnotSTATS { not match("STATS: dropped"); };
> log { source(int); filter (f_intnotSTATS); destination(console); };
> 
> ----------
> 
> So in a nutshell, you can change the time in options for "stats" and
> you can filter it by regex and take it out of source internal.
> 
> On Tue, 21 Sep 2004 11:36:49 -0300, Angelita Soares de Camargos
> 
> 
> <anghelasc@gmail.com> wrote:
> > Hello everybody.
> >
> > I installed the syslog-ng 1.6.5, storing the logs in mysql 4.0.21 and
> > it seems to be working fine, but sometimes I get this message at the log:
> > "STATS: dropped 0".
> >
> > Reading older messages I understood that some log that did not match
> > any of my filters and was flushed.
> >
> > Well, how can I know what message is it.
> > Below, a part of my syslog-ng.conf:
> >
> > filter f_emerg { level(emerg); };
> > filter f_kern_info {facility(kern) and not priority(debug); };
> > filter f_user_info {facility(user) and not priority(debug); };
> > filter f_mail_info {facility(mail) and not priority(debug); };
> > filter f_daemon_info {facility(daemon) and not priority(debug); };
> > filter f_auth_info {facility(auth) and not priority(debug); };
> > filter f_cron_info {facility(cron) and not priority(debug); };
> > filter f_err {priority(err..emerg); };
> > filter f_messages{ not priority(debug); };
> >
> > thanks in advance,
> > Angel.
> > _______________________________________________
> > syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> >
> >
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
>