How to disable log rate-limiting in Red Hat Enterprise Linux 7 and later version?

Solution Verified - Updated -

Issue

  • We want to log all messages to syslog, what should I add/change in rsyslog.conf config to avoid losing messages?

  • Why am I getting the below messages in my RHEL server?

    Apr  7 11:50:35 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting
    Apr  7 11:50:47 localhost rsyslogd-2177: imjournal: 406 messages lost due to rate-limiting
    Apr  7 12:00:38 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting
    Apr  7 12:00:48 localhost rsyslogd-2177: imjournal: 391 messages lost due to rate-limiting
    Apr  7 12:19:21 localhost rsyslogd-2177: imjournal: begin to drop messages due to rate-limiting
    
  • How do I disable rate limiting using rsyslog on my RHEL server?

  • I disabled rate limiting in rsyslog.conf but I'm still missing messages. I see warnings like this in the journal:

    Oct 28 02:07:57 localhost systemd-journal[1864]: Suppressed 97 messages from /
    
  • I increased rate limiting in /etc/systemd/journald.conf but I'm still missing messages. I see warnings like this in the journal:

    Oct 28 02:07:57 localhost systemd-journal[1864]: /dev/kmsg buffer overrun, some messages lost.
    

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • systemd-journald
  • rsyslog

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content