Public bug reported:
Maintainers explains that this option should be off :
https://www.rsyslog.com/doc/master/configuration/action/rsconf1_repeatedmsgreduction.html
> This parameter models old sysklogd legacy. Note that many people, including
> the rsyslog authors, consider this to be a misfeature. [...]
> - While turning this feature on can save some space in logs, most log
> analysis tools need to see the repeated messages, they can’t handle the “last
> message repeated” format.
> - This is a feature that worked decades ago when logs were small and reviewed
> by a human, it fails badly on high volume logs processed by tools. [...]
> This turns on repeated message reduction (not recommended):
> `$RepeatedMsgReduction on # do not log repeated messages`
So I think this option should be off by default in Ubuntu.
This option is Off in Debian 10.
Is there a reason why this is option is on on Ubuntu ?
** Affects: rsyslog (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/1837076
Title:
RepeatedMsgReduction should be off by default
Status in rsyslog package in Ubuntu:
New
Bug description:
Maintainers explains that this option should be off :
https://www.rsyslog.com/doc/master/configuration/action/rsconf1_repeatedmsgreduction.html
> This parameter models old sysklogd legacy. Note that many people, including
the rsyslog authors, consider this to be a misfeature. [...]
> - While turning this feature on can save some space in logs, most log
analysis tools need to see the repeated messages, they can’t handle the “last
message repeated” format.
> - This is a feature that worked decades ago when logs were small and
reviewed by a human, it fails badly on high volume logs processed by tools.
[...]
> This turns on repeated message reduction (not recommended):
> `$RepeatedMsgReduction on # do not log repeated messages`
So I think this option should be off by default in Ubuntu.
This option is Off in Debian 10.
Is there a reason why this is option is on on Ubuntu ?
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1837076/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
