[syslog-ng] log messages lost

[Valdis.Kletnieks at vt.edu]

On Thu, 08 Mar 2007 11:29:25 +0100, Luigi Augello said:

> sometimes in the database i found this msg record
> 
> syslog-ng[6130]: Log statistics; dropped='pipe(/tmp/mysql.pipe)=0',
> processed='center(queued)=57298', processed='center(received)=57298',
> processed='destination(d_mysql)=57298',
> processed='source(src_firewall)=51537', processed='source(src)=5761'
> 
> I assume that this message advises that some logs are lost.

Why do you think any were lost?

57,298 came in, 57,298 went into d_mysql, 0 were dropped.  Also,
the inbounds were 57,537+5,761 = 57,298, so the sum of your two sources
is equal to the number that went out the destination.  Is there some external
piece of data (such as a network trace proving that 100K msgs were
sent, and 43% of them evaporated?) that I'm not cluing in on?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070308/0761389d/attachment.pgp