Project

General

Profile

Actions

Bug #4281

closed

Rsyslog filters reports when too many reports arrive simultaneously

Added by Dennis Cabooter over 10 years ago. Updated about 10 years ago.

Status:
Released
Priority:
1
Category:
Web - Compliance & node report
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

Issue:
Logs from rsyslog are not stored in postgres

Rsyslog version:

# dpkg -l |grep rsyslog
ii  rsyslog                                5.8.6-1ubuntu8.6                  reliable system and kernel logging daemon
ii  rsyslog-pgsql                          5.8.6-1ubuntu8.6                  PostgreSQL output plugin for rsyslog

Postgres error log:

2013-12-19 11:16:09 CET ERROR:  invalid input syntax for integer: "**NO MATCH**" at character 228
2013-12-19 11:16:09 CET STATEMENT:  insert into RudderSysEvents (executionDate, nodeId, ruleId, directiveId, serial, Component, KeyValue, executionTimeStamp, eventType, msg, Policy) values ('2013-12-19T11:15:42.010588+01:00','**NO MATCH**', '**NO MATCH**' , '0', '**NO MATCH**', '**NO MATCH**', '**NO MATCH**', '**NO MATCH**', '**NO MATCH**', '**NO MATCH**', '**NO MATCH**' )

Solution:

# sed -i 's#$RepeatedMsgReduction on#$RepeatedMsgReduction off#' /etc/rsyslog.conf
# /etc/init.d/rsyslog restart


Related issues 2 (0 open2 closed)

Related to Rudder - Bug #6421: Messages can be dropped on the node, resulting in Unknown reports on the Web InterfaceReleasedJonathan CLARKEActions
Related to Rudder - Bug #8264: Disable Repeated message reduction or reports may be lost on the relayReleasedJonathan CLARKE2016-05-10Actions
Actions

Also available in: Atom PDF