Hi,
I have activated the stats in rsyslog to log to syslog stats entries.
My problem is that udp stats are doubled twice.
My configuration is:
module(load="impstats"
interval="60"
format="json"
)
module(load="imudp")
input(type="imudp"
address="*"
port="514"
ruleset="remote_udp"
)
...
I don't have any other udp input.
With this configuration, anytime that stats are recorded I get:
Jul 9 13:35:56 pitufo41 rsyslogd-pstats: { "name": "imudp(*:514)",
"origin": "imudp", "submitted": 64559362, "disallowed": 0 }
Jul 9 13:35:56 pitufo41 rsyslogd-pstats: { "name": "imudp(*:514)",
"origin": "imudp", "submitted": 0, "disallowed": 0 }
Jul 9 13:35:56 pitufo41 rsyslogd-pstats: { "name": "imudp(w0)",
"origin": "imudp", "called.recvmmsg": 42316004, "called.recvmsg": 0,
"msgs.received": 64559362 }
The imupd(w0) is correctly documented in
https://www.rsyslog.com/doc/v8-stable/configuration/modules/imudp.html#imudp-statistic-counter
as the worker statistics.
But I don't know I'm getting two records for input imudp(*:514). For
other inputs like tcp or relp (I'm using too) I don't have such
duplicity. For example:
Jul 9 13:39:58 pitufo31 rsyslogd-pstats: { "name": "imrelp(20514)",
"origin": "imrelp", "submitted": 35531697 }
Jul 9 13:39:58 pitufo31 rsyslogd-pstats: { "name": "imtcp(514)",
"origin": "imtcp", "submitted": 0 }
Jul 9 13:40:58 pitufo31 rsyslogd-pstats: { "name": "imrelp(20514)",
"origin": "imrelp", "submitted": 35619726 }
Jul 9 13:40:58 pitufo31 rsyslogd-pstats: { "name": "imtcp(514)",
"origin": "imtcp", "submitted": 0 }
I'm running rsyslog 8.2006.0-0adiscon2bionic1.
Any idea of why this?
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información
y las Comunicaciones Aplicadas (ATICA)
http://www.um.es/atica
Tfo: 868889150
Fax: 868888337
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
