[Stat] Section

In the [Stat] section, parameters of gathering statistics on Dr.Web MailD operation are specified:

Detail = {off | low | medium | high}

You can specify one of the following verbosity levels for statistics gathering:

off - disables statistics gathering, which allows to increase performance of the suite. As a result, statistics cannot be exported and no reports are sent.

low - enables gathering of statistics on operation of the whole suite. As a result, statistics can be exported and reports are sent.

medium - to the statistics gathered on the low level, statistics on groups is added. You can enable or disable statistics collection for a certain group.

high - to the statistics gathered on the medium level, statistics on each user listed in the internal database is added. You can enable or disable statistics gathering for a certain user.

You can access statistics via the control socket or the web interface. Statistics collected on the low level is also included in reports (if this option is enabled).

Default value:

Detail = low

Send = {logical}

Sending reports to the statistics server (or Dr.Web Control Center if Dr.Web MailD is working as a part of the Anti-virus network in central protection  mode).

Default value:

Send = Yes

SendPeriod = {time}

Time interval to send statistics to server.

Default value:

SendPeriod = 10m

Timeout = {time}

Timeout for the statistics server to response.

Default value:

Timeout = 30s

It is possible to export statistics with Dr.Web MailD using the Storage type.

To enable export of statistics via the Storage type:

1.Specify Yes as a value of the ExportStat parameter.

2.Configure at least one of the following parameters accordingly:

ExportStat = {logical}

Export statistics to storages specified in the corresponding parameters (see below).

Default value:

ExportStat = No

ExportBlockObjectsStorage = {string}

List of parameters that configure export of statistics on blocked messages.

This data is saved immediately after a message is blocked but only if it was scanned by the anti-virus module (that is, statistics is not exported if a message was blocked because of processing errors).

Names of the table and fields in the database can be arbitrary but they must be of the same type as exported data. Fields in the query must be ordered like in the database.

It is not necessary to use all available values in the query.

Text fields (<varchar_long>) must be enclosed in single quotation marks(').

List of values that can be used in the query:

:number<int> - unique message identifier;

:q_name<varchar_long> - path to the quarantined file where the message was saved (if it was saved in Quarantine);

:virus_name<varchar_long> - name of the blocked object found in the message;

:virus_code<int> - code of the blocked object found in the message.

The list of codes:

o1 - infected;

o2 - virus modification;

o3 - suspicious;

o4 - cured;

o5 - deleted;

o6 - filtered;

o7 - skipped;

o8 - archive restrictions;

o9 - errors;

o10 - read errors;

o11 - write errors;

o12 - adware;

o13 - dialer;

o14 - joke;

o15 - riskware;

o16 - hacktool.

:plugin_name<varchar_long> - name of the plug-in which blocked the message;

:sender<varchar_long> - sender's address enclosed in angle brackets;

:client_ip<varchar_long> - IP address of the client that loaded the message into the mail database (if available);

:date<timestamp> - timestamp of loading the message into the mail database;

:client_id<varchar_long> - the unique identifier of the Client for which saving into the mail database is performed (always 'def' string).

Example:

ExportBlockObjectsStorage = "odbc:insert into viruses values (:number<int>, ':q_name<varchar_long>', ':virus_name<varchar_long>', :virus_code<int>, ':plugin_name<varchar_long>', ':sender<varchar_long>', ':client_ip<varchar_long>', :date<timestamp>, ':client_id<varchar_long>)'"

Default Value:

ExportBlockObjectsStorage =

ExportStatStorage = {string}

Export of statistics on number of processed messages. Export is performed:

on shutdown;

after a period of time specified in the SendPeriod parameter value.

If statistics is empty (no messages were processed), nothing is exported.

Names of the table and fields in the database can be arbitrary but they must be of the same type as exported data. Fields in the query must be ordered like in the database.

It is not necessary to use all available values in the query.

List of values that can be used in the query:

:size<int> - total size of scanned messages in bytes;

:num<int> - total number of scanned messages;

:q_num<int> - total number of messages saved in Quarantine;

:r_num<int> - total number of redirected messages;

:n_num<int> - total number of messages for which  notifications were sent;

:pass_num<int> - total number of passed messages;

:reject_num<int> - total number of rejected messages;

:discard_num<int> - total number of discarded messages;

:tempfail_num<int> - total number of temporarily failed messages;

:date<timestamp> - mail database timestamp;

:q_size<int> - total size of messages saved in Quarantine;

:r_size<int> - total size of redirected messages;

:n_size<int> - total size of messages for which  notifications were sent;

:pass_size<int> - total size of passed messages;

:reject_size<int> - total size of rejected messages;

:discard_size<int> - total size of discarded messages;

:tempfail_size<int> - total size of temporarily failed messages;

:work_time<int> - plug-in operation time, in milliseconds (ms).

Example:

ExportStatStorage = "odbc:insert into g_stat values(:size<int>, :num<int>, :q_num<int>, :r_num<int>, :n_num<int>, :pass_num<int>, :reject_num<int>, :discard_num<int>, :tempfail_num<int>, :date<timestamp>)"

Default value:

ExportStatStorage =

ExportPluginStatStorage = {string}

Export of statistics on number of processed messages by each of the plug-ins. Statistics are exported only for plug-ins that are specified in the Names parameter value of the [Reports] section (or for all working plug-ins if the parameter value is not specified). Export is performed:

on shutdown;

on SIGHUP signal;

when sending a report to Administrator;

after a specified period of time, if reports are not sent too often.

If statistics are empty (no messages were processed), nothing is exported.

Names of the table and fields in the database can be arbitrary but they must be of the same type as exported data. Fields in the query must be ordered like in the database.

List of values that can be used in the query:

the same as for the ExportStatStorage parameter;

:plugin_name<varchar_long> - name of the plug-in for which statistics are exported;

Example:

ExportPluginStatStorage = "odbc:insert into plugin_stat values(':plugin_name<varchar_long>', :size<int>, :num<int>, :q_num<int>, :r_num<int>, :n_num<int>, :pass_num<int>, :reject_num<int>, :discard_num<int>, :tempfail_num<int>, :date<timestamp>)"

Default value:

ExportPluginStatStorage =

For details on the statistics export options, see Exporting Statistics.