On Dec 11, 2007 3:26 AM, Rainer Gerhards <[EMAIL PROTECTED]> wrote: > I think I misunderstood your problem... The "last message repeated n > times" stems back from the reporting sysklogd's - right?
Would ugrading to rsyslogd on the client machines help? I'm getting ready for an upgrade cycle where everything except a couple of boxes running old hardware not suppoert by the 2.6 kernel will be either Oracle ULN 4.X or Redhat/CentOS 5.X I didn't see a spec file in the tar.gz but I can write one myself if there is no good one available. > Mhhh... that's > a problem. I need to do some hardcoded processing in the parser to cover > part of it. The problem is that sysklogd emits a totally non-standard > message in that case. Even worse, I think it does not even contain a > clue at the missing information. I could probably use the sender's IP > address as source in that case, but the tag seems to be impossible to > obtain. > > Can you post me a copy of the %rawmsg% property, so that I can have a > look at what exactly you are seing? > > Rainer > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:rsyslog- > > > [EMAIL PROTECTED] On Behalf Of Rainer Gerhards > > Sent: Tuesday, December 11, 2007 12:01 PM > > To: rsyslog-users > > Subject: Re: [rsyslog] Last Message repeated N times > > > > Hi Stephen, > > > > I was totally swamped the past days, sorry for the missing response. > > I'll check what causes this. As a side-note, I think that the message > > reduction code does not work well with the database - as you can no > > longer query the individual messages. Is this your intent? > > > > Rainer > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:rsyslog- > > > [EMAIL PROTECTED] On Behalf Of Stephen Carville > > > Sent: Friday, December 07, 2007 10:09 PM > > > To: [email protected] > > > Subject: [rsyslog] Last Message repeated N times > > > > > > I am using rsyslog 1.19.10 on a central server to collect messages > > and > > > store them in a mysql database. One thing I've noticed is that the > > > "last message repeated NNN times" entries are alway entered with > > > FromHost="last", SysLogTag="message", and Message="repeated NNN > > > times". Can this be fixed? > > > > > > I still use the regular sysklogd package on the remote machines to > > > forward the messages. > > > > > > -- > > > Stephen Carville > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > -- Stephen Carville _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
