[syslog-ng] Limit logging frequency of specific messages?
Balazs Scheidler
bazsi at balabit.hu
Wed Feb 15 12:08:52 CET 2006
it should be possible with a filter, I'll add a bugreport to our
bugzilla. (maybe there's one already though)
On Tue, 2006-02-14 at 15:14 -0500, Frank Myhr wrote:
> Hi,
>
> This morning a daemon went nuts and sent enough messages to fill up my
> logging partition in a few seconds. As this partition is under /var
> (/var/log) this made some other parts of my system unhappy. I think I've
> fixed the particular problem that led to my system's self-inflicted DOS
> but got to wondering if there's a way that syslog-ng could limit the
> frequency with which it logs certain user-defined messages. Something
> like iptables' limit match:
>
> -m limit --limit 15/hour --limit-burst 30
>
> I haven't found a way to do this with syslog-ng 1.6.5 (debian sarge). Is
> something like this feasible (or better, planned for a future release)
> (or best: already there)?
>
> Thanks!
> Frank
> _______________________________________________
> syslog-ng maillist - syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>
>
--
Bazsi
More information about the syslog-ng
mailing list