Think of this line as saying: 1) since rsyslog start, 110 messages have entered the queue 2) 28 messages happen to be in it right now 3) the queue has never gotten full or near full (and therefore has had no discards) 4) the largest the queue has ever been is 29 messages
This specific line doesn't say so, but the implication is that all 110 messages that entered the queue also successfully left the queue. The maximum size of the queue's buffer also isn't listed here (and the default size is different depending on which version of rsyslog you're running), but it's likely to be at least 1,000 or 10,000 messages in size. So a maximum queue depth of 29 out of either of those two is very small. This queue is definitely handling it's load well. If you had several of these lines to compare, you could work out your average logs-per-second rate for this specific queue since the enqueued count always increments. -- Dave Caplinger, Director of Architecture | Ph: (402) 361-3063 | Solutionary — An NTT Group Security Company On May 1, 2014, at 8:26 AM, Michael Hart <[email protected]> wrote: > I have the impstats enabled. Is there a definitive metric that answers “how > many messages are queued up right now” for a particular queue? > > For example, I have this anonymized line: > > May 1 13:24:27 myhost rsyslogd-pstats: @cee: > {"name":"mystream","size":28,"enqueued":110,"full":0,"discarded.full":0,"discarded.nf":0,"maxqsize":29} > > What I think I see is that since rsyslog restarted the ‘my stream’ queue > handled 110 messages and hasn’t discarded any, but I can’t tell if it’s > queueing anything or not. > > thanks > mike > > > -- > Michael Hart > Arctic Wolf Networks > M: 226-388-4773 > > > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
