How to disable log rate-limiting in Red Hat Enterprise Linux 7 and later version?
Issue
-
We want to log all messages to syslog, what should I add/change in rsyslog.conf config to avoid losing messages?
-
Why am I getting the below messages in my RHEL server?
Apr 7 11:50:35 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting Apr 7 11:50:47 localhost rsyslogd-2177: imjournal: 406 messages lost due to rate-limiting Apr 7 12:00:38 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting Apr 7 12:00:48 localhost rsyslogd-2177: imjournal: 391 messages lost due to rate-limiting Apr 7 12:19:21 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting
-
How do I disable rate limiting using rsyslog on my RHEL server?
-
I disabled rate limiting in rsyslog.conf but I'm still missing messages. I see warnings like this in the journal:
Oct 28 02:07:57 localhost systemd-journal[1864]: Suppressed 97 messages from /
-
I increased rate limiting in
/etc/systemd/journald.conf
but I'm still missing messages. I see warnings like this in the journal:Oct 28 02:07:57 localhost systemd-journal[1864]: /dev/kmsg buffer overrun, some messages lost.
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- systemd-journald
- rsyslog
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.