Am 06.07.21 um 12:08 schrieb Michael Biebl:
Am 06.07.21 um 11:51 schrieb Ben Wong:

Ideally, I'd like to see some sort of rate-limiter added to rsyslog.

There is a rater limiter in imuxsock.
https://www.rsyslog.com/how-to-use-rate-limiting-in-rsyslog/

The problem is: a couple of GB of log data is something that a busy log server can generate in a couple of minutes which perfectly valid.

On a laptop, a couple of GB of log data is probably unusual.

The problem is to pick a default which suits everyone, which is guess is not possible.

https://www.rsyslog.com/doc/v8-stable/configuration/modules/imuxsock.html#syssock-ratelimit-interval

Apparently this feature caused problems, so it was turned off again.

SysSock.RateLimit.Interval
type    default max     mandatory       obsolete legacy directive
integer 0               no      $SystemLogRateLimitInterval

Specifies the rate-limiting interval in seconds. Default value is 0, which 
turns off rate limiting. Set it to a number of seconds (5 recommended) to 
activate rate-limiting. The default of 0 has been chosen as people experienced 
problems with this feature activated by default. Now it needs an explicit 
opt-in by setting this parameter.


Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to