Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-66274

impstats do not track dropped messages due to rate-limiting

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: Generate New Ti...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done-Errata
    • Icon: Major Major
    • rhel-9.7
    • None
    • rsyslog
    • rsyslog-8.2506.0-1.el9
    • None
    • 1
    • rhel-security-special-projects
    • ssg_security
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • SECENGSP Cycle 22
    • Feature
    • Hide
      .Rsyslog `imuxsock` provides the new `ratelimit.discarded` counter

      With this update, the `imuxsock` Rsyslog module includes a new counter, `ratelimit.discarded`, which tracks the number of messages dropped due to rate-limiting on the Unix socket. This enhancement provides administrators with visibility into message loss due to rate-limiting, enabling them to fine-tune their rate-limiting settings and prevent critical logs from being discarded.
      Show
      .Rsyslog `imuxsock` provides the new `ratelimit.discarded` counter With this update, the `imuxsock` Rsyslog module includes a new counter, `ratelimit.discarded`, which tracks the number of messages dropped due to rate-limiting on the Unix socket. This enhancement provides administrators with visibility into message loss due to rate-limiting, enabling them to fine-tune their rate-limiting settings and prevent critical logs from being discarded.
    • Done
    • Linux
    • None

      Goal

      • Our customer have a SOC in which rsyslog is used to transfer logs from endpoints to a centralized collector (Elasticsearch, Logstash, Qradar,..) and he has just noticed that impstats do not track dropped messages due to rate-limiting. Could you please add features for that purpose ?

      Acceptance criteria

      As main output module omfwd is used !

              rh-ee-alakatos Attila Lakatos
              rh-ee-klemghar Khalid Lemghari
              Attila Lakatos Attila Lakatos
              SSG Security QE SSG Security QE
              Mirek Jahoda Mirek Jahoda
              Votes:
              1 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated:
                Resolved: