# Suricata stats.log metrics

**URL:** <https://forum.suricata.io/t/suricata-stats-log-metrics/767>\
**Category:** Help\
**Created:** [October 26, 2020, 10:42am UTC](https://forum.suricata.io/t/suricata-stats-log-metrics/767 "2020-10-26T10:42:56Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![bardwang](https://avatars.discourse-cdn.com/v4/letter/b/85f322/32.png) [@bardwang](https://forum.suricata.io/u/bardwang)\
**Post date:** [October 26, 2020, 10:42am UTC](https://forum.suricata.io/t/suricata-stats-log-metrics/767/1 "2020-10-26T10:42:56Z")

</div>

Hello everyone,

I am new to Suricata. Could anyone kindly provide the definations of all these metrics from stats.log?  
I cannot figure out from google.  
Here is the link:

> **[9.6. Statistics — Suricata 5.0.2 documentation](https://suricata.readthedocs.io/en/suricata-5.0.2/performance/statistics.html#stats-log-file)**

## stats.log file

 ![image](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/1X/3cf41d465077fb8ec82dc1406d6fad00148605c3.png)

Thanks!

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [November 5, 2020, 9:11pm UTC](https://forum.suricata.io/t/suricata-stats-log-metrics/767/2 "2020-11-05T21:11:00Z")

</div>

This is still WIP, see [https://redmine.openinfosecfoundation.org/issues/1233](https://redmine.openinfosecfoundation.org/issues/1233)

---

<div class="post-metadata">

**Author:** ![arcot](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/arcot/32/2296_2.png) [@arcot](https://forum.suricata.io/u/arcot)\
**Post date:** [January 6, 2022, 12:24pm UTC](https://forum.suricata.io/t/suricata-stats-log-metrics/767/3 "2022-01-06T12:24:38Z")

</div>

Hello,

Any news about this? I understand is not a priority but it would be useful to have it documented.

I’ve found this discussion because I was puzzled by some of them. If I understand correctly those are not all counters, am I right?

Asking this because while testing I noticed that some of them decreased, for example http.memuse which I guess is the _current_ `memory used for http in bytes`.

Thanks!

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [January 26, 2022, 10:09pm UTC](https://forum.suricata.io/t/suricata-stats-log-metrics/767/4 "2022-01-26T22:09:56Z")

</div>

Still WIP but you the memuse can vary over time. It’s a bigger process to add this. But we’re open to any pull requests adding documentation upfront.

---

<div class="post-metadata">

**Author:** ![Jmatop](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/jmatop/32/1330_2.png) [@Jmatop](https://forum.suricata.io/u/Jmatop)\
**Post date:** [March 16, 2022, 3:55pm UTC](https://forum.suricata.io/t/suricata-stats-log-metrics/767/5 "2022-03-16T15:55:18Z")

</div>

Hello. Is there any news about this problem? I say this because I have a similar question in this forum.

> [@Question with Stats.log](https://forum.suricata.io/t/question-with-stats-log/2316):
>
> Hello, I have a question. What is the difference between decoder and flow on file stats.log. Like decoder.tcp and flow.tcp . Thx.

Thx.