El vie., 1 feb. 2019 a las 9:37, vishal via rsyslog (<[email protected]>) escribió: > > Hi, > > As we know /impstats/ module is used to fetch various stats of rsyslog > for all the objects like actions, queues, etc. > > For each object separate stats log line is generated like, > > /Mon Jan 21 06:16:09 2019: @cee: { "*name*": "action-1-omelasticsearch", > "_origin_": "core.action", "_processed_": 0, "_failed_": 0, > "_suspended_": 0, "_suspended.duration_": 0, "_resumed_": 0 }/ > > /Mon Jan 21 06:16:09 2019: @cee: { "*name*": "action-1-omelasticsearch > queue", "_origi__n_": "core.queue", "_size_": 0, "_enqueued_": 0, > "_full_": 0, "_discarded.full_": 0, "_discarded.nf_": 0, "_maxqsize_": 0 }/ > > I have couple queries on this, > > 1) Is there a way to make the stats fields/key unique like, can the > 'processed' field be perpended with value of name field ? > > e.g. from '/processed/' to '/action-1-omelasticsearch.processed'/ >
That would be possible but very verbose and redundant. You would need to prefix all of the fields with the name, because they all belong to the same name. > > 2) For aggregate stats processing, looking for a way to sum up the stats > of all actions and queues for particular ruleset so that it eases in > further analysis. > > for this I tried exploring writing python code, but rsyslog has external > module support for the same and which is out of the proc execution. > > What I am looking is more like in process thing simillar to syslog-ng. Can you point to how exactly you would like to have it? Rainer > > > Any help on the above queries will be greatly appreciated as I am new to > rsyslog and may have missed some setting which can be easily used for > this kind of requirement. > > Thanks, > > Vishal. > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
