[syslog-ng] syslog-ng Stats

Frank Wilkinson frank at uab.edu
Wed Apr 9 21:28:06 CEST 2014


Hi,
I'm new to syslog-ng. 
please forgive.

Can someone please... explain these:
processed='center(queued)=2836986327',
dropped='dst.udp(sopher2udp#0,udp,xxx.xxx.xxx.xxx:514)=104396', 
processed='dst.udp(sopher2udp#0,udp,xxx.xxx.xxx.xxx:514)=1395253254',
stored='dst.udp(sopher2udp#0,udp,xxx.xxx.xxx.xxx:514)=0', 

and what needs tweaking?

We have:
syslog-ng 3.5.3
Installer-Version: 3.5.3
Revision: ssh+git://algernon@git.balabit/var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.5#master#ccb05a22408ba4c837d998b2538854d994f845a5
Compile-Date: Jan  8 2014 13:35:02
Available-Modules: afsocket,afprog,dbparser,system-source,affile,syslogformat,linux-kmsg-format,csvparser,afmongodb,afsocket-tls,confgen,afuser,afstomp,afsocket-notls,basicfuncs,cryptofuncs,afamqp
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: off
Enable-TCP-Wrapper: on
Enable-Linux-Caps: off
Enable-Pcre: on

My config is:
options { threaded(yes);
        flush_lines(1000);
        time_reopen(10);
        log_fifo_size(200000);
        use_dns(yes);
        dns_cache_hosts(/etc/hosts);
        use_fqdn(no);
        keep_hostname(yes);
        chain_hostnames(no);
};

source s_udp { udp( port(514) so_rcvbuf(15000000) log_iw_size(50000) log_msg_size(65535) log_fetch_limit(50000) flags(validate-utf8));};

source s_tcp { tcp(
        log_msg_size(65535)
                port(1999)
        log_fetch_limit(500)
        max_connections(1000)
        log_iw_size(500000)
        so_rcvbuf(15000000)
        so_keepalive(yes)
        flags(validate-utf8)
); };

My stats are:
Apr  9 14:16:02 sopher1 syslog-ng[5952]: Log statistics;
 processed='destination(acs)=394697',
 processed='destination(d_cron)=1755',

 processed='center(queued)=2836986327',

 processed='destination(bradx)=0',
 processed='destination(aruba)=62814613',
 processed='source(s_tcp)=0',
 processed='destination(d_mlal)=0',
 processed='destination(d_syslognglog)=955',
 processed='destination(clearpass)=2104355',
 processed='src.none()=0',
 stamp='src.none()=0',
 processed='source(s_internal)=955',
 processed='global(msg_clones)=0',
 processed='src.internal(s_internal#0)=955',
 stamp='src.internal(s_internal#0)=1397070362',
 processed='source(s_udp)=0',
 processed='destination(paloacp)=1141796',
 processed='destination(vpn)=344489994',
 processed='destination(routers)=28167',
 processed='destination(d_cons)=1863',
 processed='destination(airwave)=7300',
 processed='destination(d_boot)=0',
 processed='destination(routers2)=1180',
 processed='destination(d_spol)=0',
 processed='destination(brad)=219125',
 processed='destination(pix)=1017647488',
 processed='destination(catch_all)=67',


 dropped='dst.udp(sopher2udp#0,udp,xxx.xxx.xxx.xxx:514)=104396', 
processed='dst.udp(sopher2udp#0,udp,xxx.xxx.xxx.xxx:514)=1395253254',
stored='dst.udp(sopher2udp#0,udp,xxx.xxx.xxx.xxx:514)=0',


 processed='destination(switches)=2171789',
 processed='destination(paloborder)=319941',
 processed='destination(ups)=15',
 processed='destination(palo)=47922',
 processed='destination(d_kern)=0',
 processed='destination(sopher2udp)=1395253254',
 processed='global(payload_reallocs)=3235',
 processed='global(sdata_updates)=8',
 processed='destination(d_mail)=32',
 processed='destination(d_mesg)=280',
 processed='center(received)=955',
 processed='destination(dhcp)=10338454',
 processed='destination(d_auth)=1241',
 processed='source(s_system)=0',
 processed='destination(d_tcp)=44'




More information about the syslog-ng mailing list