syslog sends repeated messages to a remote server (346 Views)
Reply
Occasional Visitor
Nelson Little
Posts: 2
Registered: ‎08-22-2010
Message 1 of 3 (346 Views)
Accepted Solution

syslog sends repeated messages to a remote server

Hi,

I am trying to setup syslog on a Tru64 server to send message using the local1 facility to syslog on a remote Linux server. The messages are being received however it appears that they are being sent repeatedly:

Aug 23 17:25:26 tru64-server root: test critical level message
Aug 23 17:25:26 tru64-server last message repeated 5 times
Aug 23 17:25:48 tru64-server root: test error level message
Aug 23 17:25:48 tru64-server last message repeated 4 times
Aug 23 17:25:54 tru64-server root: test warning level message
Aug 23 17:25:54 tru64-server last message repeated 3 times
Aug 23 17:26:00 tru64-server root: test notice level message
Aug 23 17:26:00 tru64-server last message repeated 2 times
Aug 23 17:26:05 tru64-server root: test information level message

To generate the above messages I used the logger utility:

logger –p local1.crit test critical level message
logger –p local1.err test error level message
logger –p local1.warning test warning level message
logger –p local1.notice test notice level message
logger –p local1.info test information level message

Below is a copy of my /etc/syslog.conf file:

kern.debug /var/adm/syslog.dated/kern.log
user.debug /var/adm/syslog.dated/user.log
mail.debug /var/adm/syslog.dated/mail.log
daemon.debug /var/adm/syslog.dated/daemon.log
auth.debug /var/adm/syslog.dated/auth.log
syslog.debug /var/adm/syslog.dated/syslog.log
lpr.err /var/adm/syslog.dated/lpr.log

msgbuf.err /var/adm/crash/msgbuf.savecore

kern.debug /var/adm/messages
kern.debug /dev/console
*.emerg *

local1.warning @remote-server
local1.notice @remote-server
local1.info @remote-server
local1.err @remote-server
local1.crit @remote-server

The syslog.conf on the remote Linux server contains the line:

local1.* /var/log/test/testlog.log

Can anyone explain why the messages are being sent repeatedly and if it is possible to stop this from happening?

Thanks.
Honored Contributor
Steven Schweda
Posts: 9,091
Registered: ‎02-23-2005
Message 2 of 3 (346 Views)

Re: syslog sends repeated messages to a remote server

Always potentially interesting:

sizer -v

> Can anyone explain [...]

man syslog.conf

[...]
severity
The severity level, which can be emerg, alert, crit, err, warning,
notice, info, or debug. See /usr/include/sys/syslog_pri.h.

The syslogd daemon logs all messages of the specified severity level
plus all messages of greater severity. For example, if you specify
level err, all messages of levels err, crit, alert, and emerg or panic
are logged.
[...]

All I know is what I read in the "man" pages,
but, from that "plus all" part, I'd say that
local1.crit @remote-server
gets you the "crit", "err", "warning",
"notice", "info", and "debug" messages,
local1.err @remote-server
gets you the "err", "warning", "notice",
"info", and "debug" messages,
local1.warning @remote-server
gets you the "warning", "notice", "info", and
"debug" messages, and so on, so you'd get
one copy of a "crit" message, two copies of
an "err", three copies of a "warning", and so
on (as observed).

Throw away most of those if you want only one
copy of anything.
Occasional Visitor
Nelson Little
Posts: 2
Registered: ‎08-22-2010
Message 3 of 3 (346 Views)

Re: syslog sends repeated messages to a remote server

The reply to the original post solved my problem.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.