Is there a way to configure rsyslog to suppress identical duplicate messages?
In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every quarter-second or so.
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.
Sign up to join this communityIs there a way to configure rsyslog to suppress identical duplicate messages?
In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every quarter-second or so.
Sounds like you're looking for the $RepeatedMsgReduction
config switch, which turns such duplicate messages into one by logging "Last line repeated n times". You can also discard unwanted messages.