Goal
- Our customer have a SOC in which rsyslog is used to transfer logs from endpoints to a centralized collector (Elasticsearch, Logstash, Qradar,..) and he has just noticed that impstats do not track dropped messages due to rate-limiting. Could you please add features for that purpose ?
Acceptance criteria
As main output module omfwd is used !