Thank you.  This was exactly what I was looking for.

Best regards Johan

Den tis 11 mars 2025 22:28David Lang via rsyslog <rsyslog@lists.adiscon.com>
skrev:

> look at the dynastats capability, it lets you addd stats that will show up
> in
> impstats and add to them as needed
>
> https://www.rsyslog.com/doc/configuration/dyn_stats.html
>
> David Lang
>
> On Tue, 11 Mar 2025, John Chivian via rsyslog wrote:
>
> > Date: Tue, 11 Mar 2025 15:11:36 -0500
> > From: John Chivian via rsyslog <rsyslog@lists.adiscon.com>
> > To: rsyslog-users <rsyslog@lists.adiscon.com>
> > Cc: John Chivian <jchiv...@chivian.com>
> > Subject: Re: [rsyslog] Metrics for filtered "stop" messages?
> >
> > Create a ruleset called “do_discard” as follows…
> >
> > ruleset(name=“do_discard”) { action(type=“omfile” file=“/dev/null”
> name=“events_discarded”) stop }
> >
> > Use that ruleset (call do_discard) instead of the “stop” directive
> elsewhere in the configuration.
> >
> > Enable impstats and look for name=“events_discarded”.  The statistics
> will show the number of messages “processed” by the ruleset.
> >
> > Yes, it is a little extra processing, but I think it’s the only way to
> get what you’re after.  The maintainers will know for sure.
> >
> > Regards,
> >
> >
> >> On Mar 11, 2025, at 12:43, Johan Ryberg via rsyslog <
> rsyslog@lists.adiscon.com> wrote:
> >>
> >> Hi,
> >>
> >> Is there any way of collecting metrics of messages that have been
> filtered
> >> "stop"?
> >>
> >> I suppose I can compare the amount of incoming and outgoing messages
> but it
> >> would be nice to know exactly how many that was discarded by choice.
> >>
> >> Best regards Johan
> >> _______________________________________________
> >> rsyslog mailing list
> >> https://lists.adiscon.net/mailman/listinfo/rsyslog
> >> http://www.rsyslog.com/professional-services/
> >> What's up with rsyslog? Follow https://twitter.com/rgerhards
> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
> you DON'T LIKE THAT.
> >
> > _______________________________________________
> > rsyslog mailing list
> > https://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to