Data in ESM but not in Logger?!?

Hello all,

My users just raised a most particular issue. They did a pretty straightforward search in ESM for two specific linux hosts in ESM for the whole day of January 19 and ESM returned almost 3000 entries. What is strange is that the same search in the Logger will return no entries at all. I have looked in the agent.out.wrapper log an saw this for instance:

[GC 184625K->87024K(272064K), 0.0090592 secs]

[Tue Jan 19 08:26:51 EST 2016] [INFO ] {Eps=7.683333333333334, Evts=56341229}

[Tue Jan 19 08:26:51 EST 2016] [INFO ] {C=0, ET=Up, HT=Up, N=LQ-J01 SL RHELAUDIT, S=55713742, T=8.748250349930014}

[Tue Jan 19 08:26:51 EST 2016] [INFO ] {C=0, ET=Up, HT=Up, N=LQ-J01 SL RHELAUDIT, S=56044281, T=8.748250349930014}

[Tue Jan 19 08:26:51 EST 2016] [INFO ] {C=0, ET=Up, HT=Up, N=LQ-J01 SL RHELAUDIT, S=10477, T=0.0}

[Tue Jan 19 08:26:51 EST 2016] [INFO ] {C=0, ET=Up, HT=Up, N=LQ-J01 SL RHELAUDIT, S=272106, T=0.0}

Now there seems to be a lot of data coming through the first two destinations. What intrigues me is the last two. There is some data being sent (S=XXXX) but why is there not value in the troughput (T=0.0)?

Also I am guessing the answer will be a big fat "NO" but isn't there any way of knowing which destinations the log is refering to? This connector has one main destination that points to the Logger, two failover destinations and one destination to ESM.

Thank you all for your help.

Parents Reply Children
No Data