Re: Fedora 6 Advice

katsumi liquer wrote:
Hi Mike,

Wow -- that is cool!! I have not heard of that parameter before. I
think I could probably use that -- if I set the rate limit high
enough, perhaps it would prevent syslog from suppressing duplicate
messages. The problem though is that I am guessing this only applies
to messages coming from the kernel; other processes which talk to
syslog directly will probably still trigger suppression I'm guessing.
For example, several repeated failure messages from sshd will generate
this message:

"last message repeated"

This is basically the situation:

http://www.syslog.org/PNphpBB2-viewtopic-t62-.phtml

I have never been able to find the official RedHat solution to the
problem, short of rebuilding a custom syslog

Hi Again, sorry I was not very clear or helpful in my message ( I was in a hurry :) )

- the kernel rate_limit is just for kernel messages
- syslog does suppress repeated messages. I don't know what the method is for detecting the repeated messages.. The important point to be aware of is that this is a 'syslog for Linux' feature, and not a Red Hat specific thing. Also it's probably not considered a problem, that is why there is not official Red Hat solution.

I'd consider syslog-ng as it's much more configurable. You won't have to modify syslog at all, and pre-built packages are available for RHEL4.

Cheers
Michael

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: [PATCH 00/23] per device dirty throttling -v8
    ... an XT when copying large files" bugzilla entry: ... start a large kernel build with DEBUG_INFO on a quad-core 4GB RAM box, ... I've got a syslog server that's got two Opteron 246 cpu's, 16G ram, 2x140G ...
    (Linux-Kernel)
  • Re: [PATCH 00/23] per device dirty throttling -v8
    ... start a large kernel build with DEBUG_INFO on a quad-core 4GB RAM box, ... I've got a syslog server that's got two Opteron 246 cpu's, 16G ram, 2x140G ... cron job copies the data to the raid array. ...
    (Linux-Kernel)
  • Re: Linux Boot-up Screens
    ... before the kernel is loaded and started. ... > The command "dmesg" dumps the contents of the kernel ring buffer. ... However, syslog is very customizable, you can have ... > programs, as long as we are talking about sysvinit scripts, are logged ...
    (comp.os.linux.misc)
  • [2.6.18-rc7] printk output delay in syslog wrt dmesg still unfixed
    ... which I reported for kernel 2.6.18-rc1 on my ... output from printkappears in syslog (eg. ...
    (Linux-Kernel)
  • Re: [PATCH 00/23] per device dirty throttling -v8
    ... start a large kernel build with DEBUG_INFO on a quad-core 4GB RAM box, ... I've got a syslog server that's got two Opteron 246 cpu's, 16G ram, 2x140G ... I have syslog doing buffered writes to the SCSI drives and every 5 min a cron job copies the data to the raid array. ... I've experimented with nice levels (nicing down the grep and nicing up the syslogd) without a noticable effect on the losses. ...
    (Linux-Kernel)