It's a legacy thing, 20 years ago when everyone was reviewing logfiles by hand
ksyslogd was the default, and disks were small, it was made the default in
ksyslogd.
when the distros switched over to rsyslog, one of the attractive things was that
they could get equivalent functionality with almost no changes to the config
file, and they were looking to make the transition with as few changes in
behavior as possible, it was made explicitly the config default in just about
every distro's rsyslog.conf
David Lang
On Sat, 12 Oct 2019, marki via rsyslog wrote:
Date: Sat, 12 Oct 2019 01:38:47 +0200
From: marki via rsyslog <[email protected]>
To: [email protected]
Cc: marki <[email protected]>
Subject: Re: [rsyslog] Rsyslog seems to think there are duplicates
Yep, I know :)
The default in SLES for this setting still seems to be On :-[
Thanks everyone!
On October 12, 2019 1:04:30 AM GMT+02:00, Nathan Stratton Treadway via rsyslog
<[email protected]> wrote:
On Fri, Oct 11, 2019 at 21:51:24 +0200, Rainer Gerhards via rsyslog
wrote:
The legacy code for this very old style "message repeated n times"
does not
consider rfc5424 structured data, so the empty MSG field makes the
messages
all equal.
As David said, that feature is not useful any longer today. This is
why it
is turned off by default.
Marki, note that the configuration parameter which controls this
behavior is "$RepeatedMsgReduction".
Nathan
----------------------------------------------------------------------------
Nathan Stratton Treadway - [email protected] - Mid-Atlantic region
Ray Ontko & Co. - Software consulting services -
http://www.ontko.com/
GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt ID:
1023D/ECFB6239
Key fingerprint = 6AD8 485E 20B9 5C71 231C 0C32 15F3 ADCD ECFB 6239
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
