[syslog-ng]incoming message stats (fwd)

[UNIX Admin]

search for the post by Jay Guerrette (sp?) where he posted some C code
to maintain stats -  and I think also input them into an RRD database
so you can view graphs. No source mods needed, just a program
destination to keep track - much cleaner in the long run if it can
keep up with your load.

On Apr 7, 2005 11:49 AM, Jim <jim@jeke.fdns.net> wrote:
> Anyone have any thoughts on this?
> 
> ---------- Forwarded message ----------
> Date: Fri, 1 Apr 2005 13:45:48 -0500 (EST)
> From: Jim <jim@jeke.fdns.net>
> Reply-To: syslog-ng@lists.balabit.hu
> To: syslog-ng@lists.balabit.hu
> Subject: [syslog-ng]incoming message stats
> 
> Hello,
> 
> I would like to get some stats on the number of incoming messages I am
> receiving on a central log server.
> 
> I am running syslog-ng 1.6.6, built with libol 0.3.15.
> 
> >From what I can see, I will need to modify libol in order for syslog-ng to
> count these messages, and tell me at a regular interval. Does this sound
> right, or am I missing another simple way to do this?
> 
> assuming I have to modify source, it looks like I can just add a counter
> to the do_write_str() function in pkt_buffer.c that looks something like
> this:
>     if (self->queue_size == self->queue_max) {
>         /* fifo full */
>         pktbuf_dropped_pkts++;
>         ol_string_free(string);
>         return ST_FAIL | ST_OK;
>     }
>     else {
>         struct buffer_node *item;
> -->        pktbuf_recved_pkts++;
> 
>         NEW_SPACE(item);
>         item->packet = string;
>         ol_queue_add_tail(&self->queue, &item->header);
>         if (++self->queue_size == self->queue_max && self->super.writable)
>             (*self->super.writable) = 0;
>     }
> 
> the "-->" indicates the new line.
> 
> Pretty much all I did was copy where the "pktbuf_dropped_pkts" was, and
> added in my variable.
> 
> The numbers that I get when I run with this don't appear to totally match
> up with what I  expect, but is fairly close. Is this the right place to
> insert a counter to count total syslog messages recieved over the network
> (from both TCP and UDP sources).
> If not, can someone point me in a different direction?
> 
> thanks!
> Mike
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
>