zeek/scripts/base/frameworks/cluster
Christian Kreibich ace5c11048 Bugfix: accurately track Broker buffer overflows w/ multiple peerings
When a node restarts or a peering between two nodes starts over for other
reasons, the internal tracking in the Broker manager resets its state (since
it's per-peering), and thus the message overflow counter. The script layer was
unaware of this, and threw errors when trying to reset the corresponding counter
metric down to zero at sync time.

We now track past buffer overflows via a separate epoch table, using Broker peer
ID comparisons to identify new peerings, and set the counter to the sum of past
and current overflows.

I considered just making this a gauge, but it seems more helpful to be able to
look at a counter to see whether any messages have ever been dropped over the
lifetime of the node process.

As an aside, this now also avoids repeatedly creating the labels vector,
re-using the same one for each metric.

Thanks to @pbcullen for identifying this one!
2025-05-07 17:30:45 -07:00
..
nodes all: Fix typos identified by typos pre-commit hook 2023-06-13 17:57:32 +02:00
__load__.zeek Add cluster framework telemetry for Broker's send-buffer use 2025-04-29 15:19:38 -07:00
broker-backpressure.zeek Add backpressure disconnect notification to cluster.log and via telemetry 2025-04-08 15:09:44 -07:00
broker-stores.zeek Revert "Merge remote-tracking branch 'origin/topic/vern/at-if-analyze'" 2023-05-31 09:20:33 +02:00
broker-telemetry.zeek Bugfix: accurately track Broker buffer overflows w/ multiple peerings 2025-05-07 17:30:45 -07:00
main.zeek Lower listen/connect retry intervals in Broker and the cluster framework to 1sec 2025-04-29 16:47:13 -07:00
pools.zeek Do not default PoolSpec topics to the empty string. 2024-02-05 18:03:08 -08:00
README More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
setup-connections.zeek time machine: Mark leftovers for removal in v7.1 2023-11-07 16:06:16 +01:00
supervisor.zeek Management framework: propagate metrics port from agent 2024-07-08 23:05:24 -07:00

The cluster framework provides for establishing and controlling a cluster
of Zeek instances.