[rsyslog-notify] Forum Thread: Re: Rate limiting issue - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Tue Apr 12 18:48:28 CEST 2016
User: dlang
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26471#p26471
Message:
----------
if rsyslog is using imjournal (which I believe Redhat does by default in
version 7), then $SystemLogRateLimitInterval 0 and
$IMUXSockRateLimitInterval 0 don't help because they modify imuxsock, not
imjournal.
This is one of the places where the new syntax where parameters are in the
load() and input() sections make it much clearer as to what's happening.
Rsyslog had the rate limiting to imjournal added after running into
corruption in journal data that caused anything reading it to end up in an
endless loop, with rsyslog's performance, it can process a LOT of messages
in such a state. :-)
More information about the rsyslog-notify
mailing list