How to disable log rate-limiting in Red Hat Enterprise Linux 7

Solution Verified - Updated -

Issue

  • We want to log all messages to syslog, what should I add/change in rsyslog.conf config to avoid losing messages?

  • Why am I getting the below messages in my RHEL 7 server?

    Apr  7 11:50:35 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting
    Apr  7 11:50:47 localhost rsyslogd-2177: imjournal: 406 messages lost due to rate-limiting
    Apr  7 12:00:38 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting
    Apr  7 12:00:48 localhost rsyslogd-2177: imjournal: 391 messages lost due to rate-limiting
    Apr  7 12:19:21 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting
    
  • How do I disable rate limiting using rsyslog7 on my RHEL7 server?

  • I disabled rate limiting in rsyslog.conf but I'm still missing messages. I see warnings like this in the journal:

    Oct 28 02:07:57 localhost systemd-journal[1864]: Suppressed 97 messages from /
    
  • I increased rate limiting in /etc/systemd/journald.conf but I'm still missing messages. I see warnings like this in the journal:

    Oct 28 02:07:57 localhost systemd-journal[1864]: /dev/kmsg buffer overrun, some messages lost.
    

Environment

  • Red Hat Enterprise Linux 7
  • systemd-journald
  • rsyslog

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In