Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Implement an option to disable intermediate updates for the metrics framework.

Browse source 
- There are some large sites having trouble and I'm thinking it
   might be overload from intermediate updates.
This commit is contained in:
Seth Hall 2012-12-21 23:17:27 -05:00
parent 9c00ef3ccd
commit 50827d8df0
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
scripts/base/frameworks/metrics/cluster.bro
View file

@ -22,6 +22,11 @@ export {
## recently. ## recently.
const cluster_request_global_view_percent = 0.1 &redef; const cluster_request_global_view_percent = 0.1 &redef;
## Intermediate updates can cause overload situations on very large clusters.
## This option may help reduce load and correct intermittent problems.
## The goal for this option is also meant to be temporary.
const enable_intermediate_updates = T &redef;
# Event sent by the manager in a cluster to initiate the # Event sent by the manager in a cluster to initiate the
# collection of metrics values for a filter. # collection of metrics values for a filter.
global cluster_filter_request: event(uid: string, id: string, filter_name: string); global cluster_filter_request: event(uid: string, id: string, filter_name: string);
@ -77,7 +82,8 @@ function data_added(filter: Filter, index: Index, val: ResultVal)
# If val is 5 and global view % is 0.1 (10%), pct_val will be 50. If that # If val is 5 and global view % is 0.1 (10%), pct_val will be 50. If that
# crosses the full threshold then it's a candidate to send as an # crosses the full threshold then it's a candidate to send as an
# intermediate update. # intermediate update.
if ( check_thresholds(filter, index, val, cluster_request_global_view_percent) ) if ( enable_intermediate_updates &&
check_thresholds(filter, index, val, cluster_request_global_view_percent) )
{ {
# kick off intermediate update # kick off intermediate update
event Metrics::cluster_index_intermediate_response(filter$id, filter$name, index); event Metrics::cluster_index_intermediate_response(filter$id, filter$name, index);