I built a flow processing incoming syslog messages that did fine until the servers sending the messages had some legit problems and sent a lot more messages in a short period.
My flow clearly started to get backed up and was processing messages that were several minutes old.
So my question is: is there any way to query NR structures to see how many messages are needing to be processed?
Even if I cant tell the destination port or even if it's TCP/UDP, it'd be very useful to know if there's a general queue count I could query.
I know there have been several queue nodes developed that could be an alternate solution, but i was wondering more about a built in method first.