try moving the impstats load up to the first line of the file. I believe that the documentation says it needs to be at the beginning.

David Lang

On Mon, 2 Feb 2015, Muhammad Asif wrote:

Date: Mon, 2 Feb 2015 17:52:44 +0500
From: Muhammad Asif <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: rsyslog-users <[email protected]>
Subject: Re: [rsyslog] impstats showing unexpected value

I m receiving only on RELP on TLS port 20514.

On Mon, Feb 2, 2015 at 4:18 PM, Rainer Gerhards <[email protected]>
wrote:

2015-02-02 12:05 GMT+01:00 Muhammad Asif <[email protected]>:

Hi!

Config file:    http://pastebin.com/CVWXGE9v

Mon Feb  2 14:57:06 2015: main Q: origin=core.queue size=0 enqueued=309
full=0 discarded.full=0 discarded.nf=0 maxqsize=76
Mon Feb  2 14:57:06 2015: imudp(w0): origin=imudp called.recvmmsg=0
called.recvmsg=0 msgs.received=0
Mon Feb  2 14:57:16 2015: imuxsock: origin=imuxsock submitted=4
ratelimit.discarded=0 ratelimit.numratelimiters=0
Mon Feb  2 14:57:16 2015: action 1: origin=core.action processed=292
failed=0 suspended=0 suspended.duration=0 resumed=0
Mon Feb  2 14:57:16 2015: imudp(*:514): origin=imudp submitted=0
Mon Feb  2 14:57:16 2015: imudp(*:514): origin=imudp submitted=0
Mon Feb  2 14:57:16 2015: imtcp(514): origin=imtcp submitted=0
Mon Feb  2 14:57:16 2015: imrelp[20514]: origin=imrelp submitted=292
Mon Feb  2 14:57:16 2015: resource-usage: origin=impstats utime=2195176
stime=1016354 maxrss=7324 minflt=890 majflt=0 inblock=0 oublock=62056
nvcsw=34073 nivcsw=11071
Mon Feb  2 14:57:16 2015: main Q: origin=core.queue size=0 enqueued=295
full=0 discarded.full=0 discarded.nf=0 maxqsize=76
Mon Feb  2 14:57:16 2015: imudp(w0): origin=imudp called.recvmmsg=0
called.recvmsg=0 msgs.received=0
Mon Feb  2 14:57:26 2015: imuxsock: origin=imuxsock submitted=6
ratelimit.discarded=0 ratelimit.numratelimiters=0
Mon Feb  2 14:57:26 2015: action 1: origin=core.action processed=246
failed=0 suspended=0 suspended.duration=0 resumed=0
Mon Feb  2 14:57:26 2015: imudp(*:514): origin=imudp submitted=0
Mon Feb  2 14:57:26 2015: imudp(*:514): origin=imudp submitted=0
Mon Feb  2 14:57:26 2015: imtcp(514): origin=imtcp submitted=0
Mon Feb  2 14:57:26 2015: imrelp[20514]: origin=imrelp submitted=246
Mon Feb  2 14:57:26 2015: resource-usage: origin=impstats utime=2220964
stime=1028256 maxrss=7324 minflt=890 majflt=0 inblock=0 oublock=62656
nvcsw=34480 nivcsw=11198


Which counter do you mean? I only see imudp and imtcp without any traffic.
Do you receive messages via UDP or plain TCP syslog?

Rainer
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to