I think I misunderstood your problem... The "last message repeated n times" stems back from the reporting sysklogd's - right? Mhhh... that's a problem. I need to do some hardcoded processing in the parser to cover part of it. The problem is that sysklogd emits a totally non-standard message in that case. Even worse, I think it does not even contain a clue at the missing information. I could probably use the sender's IP address as source in that case, but the tag seems to be impossible to obtain.
Can you post me a copy of the %rawmsg% property, so that I can have a look at what exactly you are seing? Rainer > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:rsyslog- > [EMAIL PROTECTED] On Behalf Of Rainer Gerhards > Sent: Tuesday, December 11, 2007 12:01 PM > To: rsyslog-users > Subject: Re: [rsyslog] Last Message repeated N times > > Hi Stephen, > > I was totally swamped the past days, sorry for the missing response. > I'll check what causes this. As a side-note, I think that the message > reduction code does not work well with the database - as you can no > longer query the individual messages. Is this your intent? > > Rainer > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:rsyslog- > > [EMAIL PROTECTED] On Behalf Of Stephen Carville > > Sent: Friday, December 07, 2007 10:09 PM > > To: [email protected] > > Subject: [rsyslog] Last Message repeated N times > > > > I am using rsyslog 1.19.10 on a central server to collect messages > and > > store them in a mysql database. One thing I've noticed is that the > > "last message repeated NNN times" entries are alway entered with > > FromHost="last", SysLogTag="message", and Message="repeated NNN > > times". Can this be fixed? > > > > I still use the regular sysklogd package on the remote machines to > > forward the messages. > > > > -- > > Stephen Carville > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
