Public bug reported:

Maintainers explains that this option should be off :
https://www.rsyslog.com/doc/master/configuration/action/rsconf1_repeatedmsgreduction.html

> This parameter models old sysklogd legacy. Note that many people, including 
> the rsyslog authors, consider this to be a misfeature. [...]
> - While turning this feature on can save some space in logs, most log 
> analysis tools need to see the repeated messages, they can’t handle the “last 
> message repeated” format.
> - This is a feature that worked decades ago when logs were small and reviewed 
> by a human, it fails badly on high volume logs processed by tools. [...]
> This turns on repeated message reduction (not recommended):
> `$RepeatedMsgReduction on    # do not log repeated messages`

So I think this option should be off by default in Ubuntu.

This option is Off in Debian 10.

Is there a reason why this is option is on on Ubuntu ?

** Affects: rsyslog (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1837076

Title:
  RepeatedMsgReduction should be off by default

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1837076/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to