[syslog-ng] Reading Log file

John Kristoff jtk at cymru.com
Fri Mar 11 16:17:38 CET 2011


On Thu, 10 Mar 2011 09:23:16 -0600
Martin Holste <mcholste at gmail.com> wrote:

> Yep, you're dropping most of your messages to SQL.  Your dropped stats
> should equal 0 if you're not dropping any messages.  The stats are

Drop counters can increment due to reasons besides load.  A message
might not be inserted into the database due to an error, perhaps a type
constraint for instance.  Normally syslog-ng will log multiple
failed attempts, give up and increment the drop counter per failure.

John


More information about the syslog-ng mailing list