注册 登录  
 加关注
   显示下一条  |  关闭
温馨提示!由于新浪微博认证机制调整,您的新浪微博帐号绑定已过期,请重新绑定!立即重新绑定新浪微博》  |  关闭

涅槃

文档收藏

 
 
 

日志

 
 
 
 

Adapting the rate limiting of rsyslog  

2013-09-17 18:35:20|  分类: linux系统管理 |  标签: |举报 |字号 订阅

  下载LOFTER 我的照片书  |


Rate limiting os rsyslog has advantages and disadvantages. An advantage is that it makes sure that your computer resources are not depleted while processing syslog messages from log too much. A disadvantage is that it’s possible that a lot of useful log records are missed due to the rate limiting of rsyslog.

Problem

As you all know, the logs on a Ubuntu installation are usually stored in /var/log. The main syslog file is /var/log/syslog. While troubleshooting, this message appears a lot in the syslog file.

rsyslogd-xxxx: imuxsock begins to drop messages from pid xxx due to rate-limiting

Troubleshooting a problem becomes difficult if the useful log message are rate limited. That’s why we want to change the default settings.

Solution

By default, the rate limiting of rsyslog is configured to drop log records when when more then 200 messages in 5 seconds are received from a process. The values can be adapted by adding the following 2 lines to /etc/rsyslog.conf. That is the main configuration file ofrsyslog.

$SystemLogRateLimitInterval 2
$SystemLogRateLimitBurst 500

I’ve already set them to the values that I use on my systems. You can still adapt them to your needs. It’s not advised to disable the rate limitting completely. Without rate limitting, a single process would be able to fill up your logging partitions completely in a relatively short time.

rsyslog doesn’t reload its configuration file automatically. We have to restart it manually.

# service rsyslog restart

More info can be found on the following page:
http://www.rsyslog.com/changing-the-settings/

  评论这张
 
阅读(602)| 评论(0)
推荐 转载

历史上的今天

在LOFTER的更多文章

评论

<#--最新日志,群博日志--> <#--推荐日志--> <#--引用记录--> <#--博主推荐--> <#--随机阅读--> <#--首页推荐--> <#--历史上的今天--> <#--被推荐日志--> <#--上一篇,下一篇--> <#-- 热度 --> <#-- 网易新闻广告 --> <#--右边模块结构--> <#--评论模块结构--> <#--引用模块结构--> <#--博主发起的投票-->
 
 
 
 
 
 
 
 
 
 
 
 
 
 

页脚

网易公司版权所有 ©1997-2018