On Thu, 1 May 2014, Dave Caplinger wrote:
Think of this line as saying:
1) since rsyslog start, 110 messages have entered the queue
2) 28 messages happen to be in it right now
3) the queue has never gotten full or near full (and therefore has had no
discards)
4) the largest the queue has ever been is 29 messages
This specific line doesn't say so, but the implication is that all 110
messages that entered the queue also successfully left the queue.
not quite, 110 - 28 = 82 have successfully left the queue
I think that newer versions explicitly say how many were delivered, very useful
if you use the option to zero the counters after each report.
David Lang
The maximum size of the queue's buffer also isn't listed here (and the
default size is different depending on which version of rsyslog you're
running), but it's likely to be at least 1,000 or 10,000 messages in size.
So a maximum queue depth of 29 out of either of those two is very small.
This queue is definitely handling it's load well.
If you had several of these lines to compare, you could work out your average
logs-per-second rate for this specific queue since the enqueued count always
increments.
--
Dave Caplinger, Director of Architecture | Ph: (402) 361-3063 | Solutionary —
An NTT Group Security Company
On May 1, 2014, at 8:26 AM, Michael Hart <[email protected]> wrote:
I have the impstats enabled. Is there a definitive metric that answers “how
many messages are queued up right now” for a particular queue?
For example, I have this anonymized line:
May 1 13:24:27 myhost rsyslogd-pstats: @cee:
{"name":"mystream","size":28,"enqueued":110,"full":0,"discarded.full":0,"discarded.nf":0,"maxqsize":29}
What I think I see is that since rsyslog restarted the ‘my stream’ queue
handled 110 messages and hasn’t discarded any, but I can’t tell if it’s
queueing anything or not.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
