Public bug reported:
Maintainers explains that this option should be off :
https://www.rsyslog.com/doc/master/configuration/action/rsconf1_repeatedmsgreduction.html
> This parameter models old sysklogd legacy. Note that many people, including
> the rsyslog authors, consider this to be a misfeature. [...]
> - While turning this feature on can save some space in logs, most log
> analysis tools need to see the repeated messages, they can’t handle the “last
> message repeated” format.
> - This is a feature that worked decades ago when logs were small and reviewed
> by a human, it fails badly on high volume logs processed by tools. [...]
> This turns on repeated message reduction (not recommended):
> `$RepeatedMsgReduction on # do not log repeated messages`
So I think this option should be off by default in Ubuntu.
This option is Off in Debian 10.
Is there a reason why this is option is on on Ubuntu ?
** Affects: rsyslog (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1837076
Title:
RepeatedMsgReduction should be off by default
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1837076/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs