Starting from version 4.4.7, the sensor will log periodically (hourly) into a special file statistics about its cache usage. This file can assist to analyze resource utilization of the sensor. The file contain statistics for these sensor caches: rule cache, stored procedure cache, prepared statement cache, session per NIC, and the network session buffers.
The format of each log entry beyond the standard header is:
< MONITORING_COMPONENT>: <SUB_COMPONENT> <STATS_INFO>
The log contains these fields:
MONITORING_COMPONENT — Either NETWORK or MEMORY. Indicates the monitoring technology that the statistics info entry is related to.
SUB_COMPONENT — One of the following depending on the stats info entry:
DB instance name - Format: DB[<full_db_name>]
A network interface name - Format: NIC[<full_nic_name>]
GLOBAL - A global stats info entry not related to a specific network interface or DB instance
STATS_INFO — The statistics information to be logged.
Sample log messages:
Sat Nov 8 2014 20:42:19.349 T[2484] F[CacheStatisticsFileManager.cpp] L[120] NOTICE NETWORK: GLOBAL: Network Session Buffer: Global cache used[8192] out of [268435456] bytes,rate[~0%] : Global cache in limits: OK
Sat Nov 8 2014 20:42:19.349 T[2484] F[CacheStatisticsFileManager.cpp] L[120] NOTICE NETWORK: DB[myhost_SQL2012RTM_6049d7b3295c468a7b638d4ff2738352ab4c794a]: Stored Procedure Cache[maxSize[81920KB],load[0%]] Rule Cache[disable]
Sat Nov 8 2014 20:42:19.365 T[2484] F[CacheStatisticsFileManager.cpp] L[120] NOTICE MEMORY : DB[myhost_SQL2012RTM_6049d7b3295c468a7b638d4ff2738352ab4c794a]: Stored Procedure
Cache[maxSize[81920KB],load[22%],elements[2695],averElemSize[6881B],access[139],misCount[34],misRate[24%],hitCount[105],hitRate[75%],latest:[access[0]] Rule Cache[maxSize[52428800],used[80%],nodes[165],totalAccessCount[7261],totalHitCount[3730],totalHitRate[51%],totalMissCount[3531],totalMisRate[48%]]
Sat Nov 8 2014 20:42:19.381 T[2484] F[CacheStatisticsFileManager.cpp] L[120] NOTICE NETWORK: DB[myhost_SQL2012RTM_6049d7b3295c468a7b638d4ff2738352ab4c794a]: Prepared Statement Cache[maxSize[51200KB],load[0%],elements[32],averElemSize[1460B],access[0]]
Sat Nov 8 2014 20:42:19.343 T[2484] F[CacheStatisticsFileManager.cpp] L[120] NOTICE NETWORK: Nic[\Device\NPF_{EA4063F0-407E-46D7-A634-6A2A8502D1EC}(0.0.0.0)]: Number Of sessions[1]