Am 05.05.2019 um 16:23 schrieb Mark Szentes-Wanner: > Package: rsyslog > Version: 8.24.0-1 > Severity: normal > > Dear Michael, > > I recently opened up a search query in KDE Dolphin and left the window open > for a few days. Only later did I realize that rsyslog filled up the available > disk space with millions of these messages: > > May 5 01:24:22 concha dbus-daemon[1293]: Rejected: destination has a full > message queue, 0 matched rules; type="signal", sender=":1.9" (uid=1000 > pid=1362 comm="kded5 [kdeinit5] ") > interface="org.kde.KDirNotify" member="FilesAdded" error name="(unset)" > requested_reply="0" destination="org.freedesktop.DBus" (uid=1000 pid=14887 > comm="filenamesearch.so [kdeinit5] filenamesearch local:") > May 5 01:24:22 concha dbus-daemon[1293]: Rejected: destination has a full > message queue, 0 matched rules; type="signal", sender=":1.9" (uid=1000 > pid=1362 comm="kded5 [kdeinit5] ") > interface="org.kde.KDirNotify" member="FilesAdded" error name="(unset)" > requested_reply="0" destination="org.freedesktop.DBus" (uid=1000 pid=14887 > comm="filenamesearch.so [kdeinit5] filenamesearch local:") > > I expected rsyslog to recognize repetitions of the same line and just post > "the previous message repeated 10000 times". Please improve the recognition > of repetitions. I attached a few sample lines for further investigations.
You can turn that feature on, see https://www.rsyslog.com/doc/v8-stable/configuration/action/rsconf1_repeatedmsgreduction.html It's turned off by default since it has its own set of problems. By default, rsyslog applies rate limiting on imuxsock https://www.rsyslog.com/tag/systemlogratelimitinterval/ If you get more then 200 of such messages within 5 seconds, then this rate limiting will kick in. How many of those messages did you get within a 5 second window? -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
