10

Is there a way to configure rsyslog to suppress identical duplicate messages?

In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every quarter-second or so.

  • which version of rsyslog are you running? – Nikhil Mulley Dec 8 '11 at 13:22
10

Sounds like you're looking for the $RepeatedMsgReduction config switch, which turns such duplicate messages into one by logging "Last line repeated n times". You can also discard unwanted messages.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.