Suppress duplicate messages in rsyslog?

Question

Is there a way to configure rsyslog to suppress identical duplicate messages?

In certain situations (often hardware failures) my syslog can grow to 100 MB or more due to repeated messages every quarter-second or so.

which version of rsyslog are you running? – Nikhil Mulley Dec 08 '11 at 13:22 — Nikhil Mulley, Dec 08 '11 at 13:22

score 12 · Accepted Answer · edited Jul 08 '22 at 03:52

12

See the $RepeatedMsgReduction config switch, which turns such duplicate messages into one by logging "Last line repeated n times". You can also discard unwanted messages.

edited Jul 08 '22 at 03:52

Dave Jarvis

209
2
9

answered Dec 08 '11 at 13:13

sr_

15,224
49
55

Suppress duplicate messages in rsyslog?

1 Answers1