[syslog-ng] UDP Dropping packets

[Sandor Geller]

Hello,

On Thu, Aug 25, 2011 at 10:38 PM, Aldrich, Jamie S <JSAldrich at pier1.com> wrote:
> I am trying to send the output from an application log to a LogLogic device,
> and it appears we are getting UDP drops repeatedly.  Any ideas on what I can
> do to fix them?
>
>
>
> Aug 25 15:24:55 lxfwossecp3 syslog-ng[2297]: Log statistics;
> dropped='udp(10.13.33.11:514)=0', processed='center(queued)=6376',
> processed='center(received)=6376', processed='destination(d_messages)=6374',
> processed='destination(d_bo
>
> ot)=0', processed='destination(d_auth)=0',
> processed='destination(d_cron)=1', processed='destination(d_mlal)=0',
> processed='destination(d_kern)=0', processed='destination(d_mesg)=1',
> processed='destination(d_cons)=0', processed='des
>
> tination(d_spol)=0', processed='destination(d_mail)=0',
> processed='source(s_sys)=2', processed='source(s_file)=6374',
> suppressed='udp(10.13.33.11:514)=0'
>
>
>
> Aug 25 15:34:55 lxfwossecp3 syslog-ng[2297]: Log statistics;
> dropped='udp(10.13.33.11:514)=0', processed='center(queued)=6378',
> processed='center(received)=6378', processed='destination(d_messages)=6374',
> processed='destination(d_bo
>
> ot)=0', processed='destination(d_auth)=0',
> processed='destination(d_cron)=2', processed='destination(d_mlal)=0',
> processed='destination(d_kern)=0', processed='destination(d_mesg)=2',
> processed='destination(d_cons)=0', processed='des
>
> tination(d_spol)=0', processed='destination(d_mail)=0',
> processed='source(s_sys)=4', processed='source(s_file)=6374',
> suppressed='udp(10.13.33.11:514)=0'

I don't see any proof of dropped messages

Are you sure that your syslog-ng config is OK? It's somewhat
unexpected that a server only gets 2 log messages in 10 mins so I'm
more or less sure that some vital log sources are missing from your
config.

Regards,

Sandor