vector icon indicating copy to clipboard operation
vector copied to clipboard

Syslog source has no received events metrics when the mode is UDP

Open youtian001 opened this issue 3 years ago • 5 comments

A note for the community

  • Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
  • If you are interested in working on this issue or have submitted a pull request, please leave a comment

Problem

I'm using Syslog source in UDP mode with internal metrics turned on. It turns out that the received events related metrics of the source like component_received_event_bytes_total and component_received_event_total are missing.

FYI, using Syslog source in TCP mode do have those received events related metrics.

Configuration

{
  "type": "syslog",
  "address": "0.0.0.0:514",
  "mode": "udp",
  "tls": {
    "enabled": false
  }
}

Version

vector 0.26.0 (x86_64-apple-darwin c6b5bc2 2022-12-05)

Debug Output

No response

Example Data

No response

Additional Context

No response

References

No response

youtian001 avatar Dec 22 '22 01:12 youtian001

@youtian001 I confirm this behavior. I have checked the source code of syslog source in udp mode - it doesn't send these metrics. I guess it's a bug and should be fixed.

I think the fix shouldn't be a difficult one - just add the required metrics in the corresponding places. The only possible caveat here - if the code is shared with something and it will interfere with other functionality. We will need to check it more carefully.

zamazan4ik avatar Dec 22 '22 13:12 zamazan4ik

Hi team, any progress on this bug? thanks.

youtian001 avatar Jun 20 '23 15:06 youtian001

Hi team, any progress on this bug? thanks.

Not yet unfortunately, but happy to support a PR from anyone so motivated.

jszwedko avatar Jun 20 '23 17:06 jszwedko

Hi team, is there any progress on this bug?

Thanks

sharyash81 avatar Jun 11 '25 11:06 sharyash81

Hi team, is there any progress on this bug?

Thanks

No updates unfortunately, as always happy to review a PR.

pront avatar Jun 11 '25 13:06 pront