eve: log number of events dropped at exit

diff --git a/src/output-json.c b/src/output-json.c
index 7b0a1f99a07c623dd8005eb125191d83430ebb29..5a457cd5046ffc68ac43e29b4ea647e5b40eab4b 100644 (file)
--- a/src/output-json.c
+++ b/src/output-json.c
@@ -720,6 +720,11 @@ static void OutputJsonDeInitCtx(OutputCtx *output_ctx)
 {
     OutputJsonCtx *json_ctx = (OutputJsonCtx *)output_ctx->data;
     LogFileCtx *logfile_ctx = json_ctx->file_ctx;
+    if (logfile_ctx->dropped) {
+        SCLogWarning(SC_WARN_EVENT_DROPPED,
+                "%"PRIu64" events were dropped due to slow or "
+                "disconnected socket", logfile_ctx->dropped);
+    }
     LogFileFreeCtx(logfile_ctx);
     SCFree(json_ctx);
     SCFree(output_ctx);

diff --git a/src/util-error.c b/src/util-error.c
index 7b7aa7afc352b586804a17732f1bc4aa96b81595..99b7e55cf7267c49c1f655cc69f4dd955fae3962 100644 (file)
--- a/src/util-error.c
+++ b/src/util-error.c
@@ -339,6 +339,7 @@ const char * SCErrorToString(SCError err)
         CASE_CODE (SC_ERR_VAR_LIMIT);
         CASE_CODE (SC_WARN_CHMOD);
         CASE_CODE (SC_WARN_LOG_CF_TOO_MANY_NODES);
+        CASE_CODE (SC_WARN_EVENT_DROPPED);
     }
 
     return "UNKNOWN_ERROR";

diff --git a/src/util-error.h b/src/util-error.h
index 85e174abbe0746d2844d5caf9ce41d5b53b314c0..dbafabe1009aad79e5b124c58adaf1d0098da29b 100644 (file)
--- a/src/util-error.h
+++ b/src/util-error.h
@@ -329,6 +329,7 @@ typedef enum {
     SC_WARN_DUPLICATE_OUTPUT,
     SC_WARN_CHMOD,
     SC_WARN_LOG_CF_TOO_MANY_NODES,
+    SC_WARN_EVENT_DROPPED,
 } SCError;
 
 const char *SCErrorToString(SCError);