Hi,
What is the log volume that is forwarded by this nxlog instance?
Something like the following can measure a per minute event rate:
<Output out>
Module om_udp
Host 192.168.0.2
Port 514
Exec create_stat("msgrate", "RATE", 60); add_stat("msgrate", 1);
<Schedule>
Every 60 sec
Exec create_stat("msgrate", "RATE", 60); add_stat("msgrate", 0);
Exec log_info("msgrate: " + get_stat("msgrate"));
</Schedule>
</Output>
This is logged into nxlog.log, so make sure to change LogLevel to INFO.
Regards,
Botond
On Tue, 03 Sep 2013 14:08:46 +0200
cyon | Matthias Blohm <[email protected]> wrote:
> Hi,
>
> please do not wonder my regex.
> Only 3 files of exim-logs and 4 files inside the the apachelogdir are
> available.
>
> here the config:
>
> ## This is a sample configuration file. See the nxlog reference manual
> about the
> ## configuration options. It should be installed locally under
> ## /usr/share/doc/nxlog-ce/ and is also available online at
> ## http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html
> ########################################
> # Global directives #
> ########################################
> User nxlog
> Group nxlog
>
> LogFile /var/log/nxlog/nxlog.log
> LogLevel CRITICAL
>
> ########################################
> # Modules #
> ########################################
> <Input apache_access>
> Module im_file
> File "/usr/local/apache/logs/*_log"
> SavePos TRUE
> </Input>
> <Input apache_error>
> Module im_file
> File "/usr/local/apache/logs/*.log"
> SavePos TRUE
> </Input>
> <Input exim>
> Module im_file
> File "/var/log/exim_*log"
> SavePos TRUE
> </Input>
> <Input mysql>
> Module im_file
> File "/var/log/mysqld.log"
> SavePos TRUE
> </Input>
> <Input mysql_slow>
> Module im_file
> File "/var/log/mysql_slow.log"
> SavePos TRUE
> </Input>
> <Input mail>
> Module im_file
> File "/var/log/maillog"
> SavePos TRUE
> </Input>
> <Input audit>
> Module im_file
> File "/var/log/audit/audit.log"
> SavePos TRUE
> </Input>
> <Input rkhunter>
> Module im_file
> File "/var/log/rkhunter.log"
> SavePos TRUE
> </Input>
> <Input rkhunter_orig>
> Module im_file
> File "/var/log/rkhunter/rkhunter.log"
> SavePos TRUE
> </Input>
>
> # Routing
> <Route 1>
> Path
> apache_access,apache_error,exim,mysql,mysql_slow,mail,audit,rkhunter,rkhunter_orig
> => out
> </Route>
>
> # Output
> <Output out>
> Module om_udp
> Host 192.168.0.2
> Port 514
> </Output>
> ####################################
>
>
>
> Greetings
> Matthias
>
> On 03/09/13 12:23, Botond Botyanszki wrote:
> > Hi,
> >
> > There are some cases when it takes some time for the modules to shut
> > down and this can exceed the time the initscript will wait for
> > termination.
> > Can you attach your nxlog.conf?
> >
> > Regards,
> > Botond
> >
> > On Mon, 02 Sep 2013 16:16:38 +0200
> > cyon | Matthias Blohm <[email protected]> wrote:
> >
> >> Hi,
> >> an other problem occurs when we try to restart the daemon by the init
> >> script.
> >> /etc/init.d/nxlog restart
> >>
> >> The logentries:
> >>
> >> 2013-09-02 13:54:12 WARNING nxlog-ce received a termination request
> >> signal, exiting...
> >> 2013-09-02 13:54:23 ERROR failed to stop module out, module is busy
> >> 2013-09-02 13:54:27 ERROR Another instance is already running (pid
> >> 20418);Resource temporarily unavailable
> >>
> >> As i try to restart it twice the daemon is starting and running.
> >> I allready made a sleep by 35 seconds between the commands inside
> >> init-script. The Problem dont exists anymore.
> >>
> >> $0 stop && sleep 35 && $0 start
> >>
> >> Where could be the problem? The daemon i measure out takes to long to stop.
> >>
> >>
> >>
> >> Matthias Blohm
> >> Senior System Engineer
> >>
> >> --
> >> cyon GmbH
> >> Aeschengraben 6
> >> 4051 Basel
> >>
> >> Direktnummer: +41 61 500 18 31
> >> Kostenlose Hotline: +41 800 840 840
> >> Fax: +41 61 500 18 17
> >>
> >> http://www.cyon.ch
> >>
> >> -
> >> Folgen Sie uns auf Facebook und Twitter:
> >>
> >> http://facebook.com/cyonhosting
> >> http://twitter.com/cyon
> >>
> >>
> >> ------------------------------------------------------------------------------
> >> Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
> >> Discover the easy way to master current and previous Microsoft technologies
> >> and advance your career. Get an incredible 1,500+ hours of step-by-step
> >> tutorial videos with LearnDevNow. Subscribe today and save!
> >> http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
> >> _______________________________________________
> >> nxlog-ce-users mailing list
> >> [email protected]
> >> https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
> > ------------------------------------------------------------------------------
> > Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
> > Discover the easy way to master current and previous Microsoft technologies
> > and advance your career. Get an incredible 1,500+ hours of step-by-step
> > tutorial videos with LearnDevNow. Subscribe today and save!
> > http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
> > _______________________________________________
> > nxlog-ce-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
>
>
> Matthias Blohm
> Senior System Engineer
>
> --
> cyon GmbH
> Aeschengraben 6
> 4051 Basel
>
> Direktnummer: +41 61 500 18 31
> Kostenlose Hotline: +41 800 840 840
> Fax: +41 61 500 18 17
>
> http://www.cyon.ch
>
> -
> Folgen Sie uns auf Facebook und Twitter:
>
> http://facebook.com/cyonhosting
> http://twitter.com/cyon
>
>
> ------------------------------------------------------------------------------
> Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
> Discover the easy way to master current and previous Microsoft technologies
> and advance your career. Get an incredible 1,500+ hours of step-by-step
> tutorial videos with LearnDevNow. Subscribe today and save!
> http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
> _______________________________________________
> nxlog-ce-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
------------------------------------------------------------------------------
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
_______________________________________________
nxlog-ce-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
