[logs] Is "last message repeated n times" anything good?
Stephen Carville
stephen.carville at gmail.com
Wed Mar 19 11:52:05 PDT 2008
On Tue, Mar 18, 2008 at 3:11 AM, Rainer Gerhards
<rgerhards at hq.adiscon.com> wrote:
> Before I drop the feature, I'd like to receive as broad feedback as
> possible from potential users.
> Does anybody actually need this feature? If so, why is it good?
>
> Please provide feedback.
I use rsyslog V2, with syslog on some older machines, to provide
central logging to a mysql database. So far I have about 10,500,000
lines in the Messages log and about 874,000 of those are "last message
repeated N times". That last number maybe higher than normal since
most seem to be SMNP connections from Cricket which is known for
generating lots of connections very fast. The exrta lines that would
only make the database about 8% larger which I don't think would be a
problem.
In fact, I'm going to turn it off on all the rsyslog equipped machines tonight
--
Stephen Carville
More information about the LogAnalysis
mailing list