[syslog-ng] Limit logging frequency of specific messages?

Balazs Scheidler bazsi at balabit.hu
Wed Feb 15 12:08:52 CET 2006


it should be possible with a filter, I'll add a bugreport to our
bugzilla. (maybe there's one already though)

On Tue, 2006-02-14 at 15:14 -0500, Frank Myhr wrote:
> Hi,
> 
> This morning a daemon went nuts and sent enough messages to fill up my
> logging partition in a few seconds. As this partition is under /var
> (/var/log) this made some other parts of my system unhappy. I think I've
> fixed the particular problem that led to my system's self-inflicted DOS
> but got to wondering if there's a way that syslog-ng could limit the
> frequency with which it logs certain user-defined messages. Something
> like iptables' limit match:
> 
> -m limit --limit 15/hour --limit-burst 30
> 
> I haven't found a way to do this with syslog-ng 1.6.5 (debian sarge). Is
> something like this feasible (or better, planned for a future release)
> (or best: already there)?
> 
> Thanks!
> Frank
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
> 
> 
-- 
Bazsi



More information about the syslog-ng mailing list