Is there a way to configure rsyslog to suppress identical duplicate messages?
In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every quarter-second or so.
Sounds like you're looking for the $RepeatedMsgReduction config switch, which turns such duplicate messages into one by logging "Last line repeated n times". You can also discard unwanted messages.
Sign up using Google
Sign up using Facebook
Sign up using Stack Exchange
By posting your answer, you agree to the
terms of service.
1 year ago