[syslog-ng] Reading Log file
John Kristoff
jtk at cymru.com
Fri Mar 11 16:17:38 CET 2011
On Thu, 10 Mar 2011 09:23:16 -0600
Martin Holste <mcholste at gmail.com> wrote:
> Yep, you're dropping most of your messages to SQL. Your dropped stats
> should equal 0 if you're not dropping any messages. The stats are
Drop counters can increment due to reasons besides load. A message
might not be inserted into the database due to an error, perhaps a type
constraint for instance. Normally syslog-ng will log multiple
failed attempts, give up and increment the drop counter per failure.
John
More information about the syslog-ng
mailing list