[syslog-ng] Getting log statistics file every 10 minutes.

Jordan Ladora vicepresjoebiden at gmail.com
Tue Apr 25 20:08:37 UTC 2017


Thanks. I've changed it to 86400, once a day.

I'll try the later version in ports the next time I set it up in a few days
and will let you know if it begins generating Log statistics records as it
should when it starts up.



On Tue, Apr 25, 2017 at 12:25 PM, Fekete, RĂ³bert <robert.fekete at balabit.com>
wrote:

> Hi,
>
> The frequency of this message depends on the stats-freq() global option,
> you can adjust it as needed. The funny thing is, that the default of this
> option is ten minutes (600 seconds), and has been so for ages (AFAIK). So
> the real question is, why didn't you get this message every ten minutes
> until now?
>
> Regards,
>
> Robert
>
> On Tue, Apr 25, 2017 at 7:41 PM, Jordan Ladora <vicepresjoebiden at gmail.com
> > wrote:
>
>> Hello,
>>
>> After running normally for 6 or 7 days, starting at midnight, on my
>> syslog-ng server running freebsd 11-Rel and syslog-ng 3.7.3_7 (installed
>> with pkg), I started getting a Log statistics record every 10 minutes,
>> which is excessive.
>>
>> This is only happening with a local log file designated in the .conf file
>> like so-
>>
>> source s_local { system(); internal(); };
>> destination d_local { file("/var/log/sng_local"); };
>> log { source(s_local); destination(d_local); };
>>
>>
>> This is one of the entries I'm getting every 10min in the
>> /var/log/sng_local file-
>>
>> Apr 25 12:00:02 logbox syslog-ng[370]: Log statistics;
>> processed='source(s_network)=2602643', processed='destination(security)=18',
>> processed='center(received)=2912379', processed='destination(ppp)=0',
>> processed='src.internal(s_local#3)=894', stamp='src.internal(s_local#3)=1493139002',
>> processed='center(queued)=3235133', processed='destination(console)=15635',
>> processed='src.none()=0', stamp='src.none()=0',
>> processed='destination(audit)=18', processed='destination(messages)=2595805',
>> processed='destination(xferlog)=0', processed='global(payload_reallocs)=1703',
>> processed='global(sdata_updates)=27054', processed='destination(allusers)=0',
>> processed='destination(authlog)=391', processed='destination(maillog)=299021',
>> processed='destination(consolelog)=0', processed='destination(lpd-errs)=0',
>> processed='destination(cron)=14282', processed='destination(slip)=0',
>> processed='global(msg_clones)=0', processed='source(s_local)=309736',
>> processed='destination(d_local)=309736', processed='destination(debuglog)=227',
>> processed='global(internal_queue_length)=0'
>>
>>
>> What did I do to deserve this every 10 minutes?
>>
>>
>> ____________________________________________________________
>> __________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=
>> syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20170425/8309c759/attachment-0001.html>


More information about the syslog-ng mailing list