Is there a way to configure rsyslog to suppress identical duplicate messages?
In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every quarter-second or so.
asked Dec 8, 2011 at 13:06
-
which version of rsyslog are you running?– Nikhil MulleyDec 8, 2011 at 13:22
Add a comment
|
1 Answer
Sounds like you're looking for the $RepeatedMsgReduction config switch, which turns such duplicate messages into one by logging "Last line repeated n times". You can also discard unwanted messages.
