[syslog-ng] syslog-ng stats

Balazs Scheidler bazsi at balabit.hu
Fri May 11 19:49:47 CEST 2007


On Fri, 2007-05-11 at 12:10 -0400, Jason Qualkenbush wrote:
> Can someone explain what the difference is between "queued" and "received"?
> 
> I'm looking at the difference between two different syslog-ng servers.
>  On the light server, the queued and received counter always match.
> On the heavily loaded server the queued and received differ quite a
> bit:
> 
> processed='center(queued)=4988110'
> processed='center(received)=1103080'
> 
> Am I losing messages?

No, the central log dispatcher can issue a single message multiple
times. So incoming messages 1103080, messages towards destinations
4988110.

-- 
Bazsi



More information about the syslog-ng mailing list