Hi,
As we know /impstats/ module is used to fetch various stats of rsyslog
for all the objects like actions, queues, etc.
For each object separate stats log line is generated like,
/Mon Jan 21 06:16:09 2019: @cee: { "*name*": "action-1-omelasticsearch",
"_origin_": "core.action", "_processed_": 0, "_failed_": 0,
"_suspended_": 0, "_suspended.duration_": 0, "_resumed_": 0 }/
/Mon Jan 21 06:16:09 2019: @cee: { "*name*": "action-1-omelasticsearch
queue", "_origi__n_": "core.queue", "_size_": 0, "_enqueued_": 0,
"_full_": 0, "_discarded.full_": 0, "_discarded.nf_": 0, "_maxqsize_": 0 }/
I have couple queries on this,
1) Is there a way to make the stats fields/key unique like, can the
'processed' field be perpended with value of name field ?
e.g. from '/processed/' to '/action-1-omelasticsearch.processed'/
2) For aggregate stats processing, looking for a way to sum up the stats
of all actions and queues for particular ruleset so that it eases in
further analysis.
for this I tried exploring writing python code, but rsyslog has external
module support for the same and which is out of the proc execution.
What I am looking is more like in process thing simillar to syslog-ng.
Any help on the above queries will be greatly appreciated as I am new to
rsyslog and may have missed some setting which can be easily used for
this kind of requirement.
Thanks,
Vishal.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
