Forum
Sign in
▲
6

Syslog over UDP dropping messages, how do I tell how many?

asked by theod 20 days ago

Fairly sure we lose events during spikes but I cannot prove it, which makes it hard to justify changing anything.

2 answers

Sign in to answer.
▲
shadepl 12 points 20 days ago

you mostly cannot. that is the point of udp

netstat -su on the receiver, receive buffer errors. rsyslog impstats shows queue discards. neither gives you a real number for what never arrived

▲
vivida (David) 7 points 20 days ago

If you need to justify it to somebody, the argument is not "we are losing X". It is "we cannot tell whether we are losing anything, and that is the problem".

Guidelines Newest Search Back to Trunc